Behavioral task
behavioral1
Sample
7783d590c88c837f40bd38011f2933ee_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
7783d590c88c837f40bd38011f2933ee_JaffaCakes118
-
Size
895KB
-
MD5
7783d590c88c837f40bd38011f2933ee
-
SHA1
cd83dcef33b752b483a6c0a30309187c948edb8f
-
SHA256
05cb854914a7254ff441b13473c2132a16eab0a02f8e7ee0ca2875f1acafcca5
-
SHA512
240349286eb3601f8825139a717c7959a65b9697b6736115db9de57478eebb21369b126c9c514a20cb96969eecf5e5c7a52f391a5fcc231c8e7d8dd512579f4a
-
SSDEEP
12288:EIV/G8U6Fp0bC3s42mUjcH05A65Fkn5lPFl7InhQVbmtKKGrhmM9j18888888885:nGYpcWZEjcH05A8g/bInhQVuKzIM9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7783d590c88c837f40bd38011f2933ee_JaffaCakes118
Files
-
7783d590c88c837f40bd38011f2933ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE