Behavioral task
behavioral1
Sample
76cc61e49dfc8ec751398f1ea0a82b53_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
76cc61e49dfc8ec751398f1ea0a82b53_JaffaCakes118
-
Size
784KB
-
MD5
76cc61e49dfc8ec751398f1ea0a82b53
-
SHA1
4d9f2100bb4d52f743290ab0439f27b1028b840f
-
SHA256
eb7a51789248392e089f3b3808c449e3ad0fa1e8f3f040946a3912013030d88e
-
SHA512
e5d355fec012cc0396375bfbc8b28530695609646573401b6eb57102d728847db7b93baf80cf7ce28e98b989b2d59289b603766f0419a2472a576d42ea23523b
-
SSDEEP
24576:Z7Bjei49bXf0j7dOv+T75NCA+5RwVf/unSI2y6tk:Z7ZebcFOv9h5+ZTI2R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76cc61e49dfc8ec751398f1ea0a82b53_JaffaCakes118
Files
-
76cc61e49dfc8ec751398f1ea0a82b53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE