Behavioral task
behavioral1
Sample
7765db0902832db753b3828fa3e33f78_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
7765db0902832db753b3828fa3e33f78_JaffaCakes118
-
Size
784KB
-
MD5
7765db0902832db753b3828fa3e33f78
-
SHA1
14878c22addb1cb15eb90e83867a2b391c448f4a
-
SHA256
284d69aaa054a09af4aa5a7bb0e1641844f9b312e2452be2ad81ffbabae5988d
-
SHA512
483e147239cb0bb615ec185423631f5f4953b39c1ec952455ddcc39ab82df2a5c45e93ae468e4ac84232a3f54825f84a281c5685578b4ab8daafb896924d0274
-
SSDEEP
12288:sff/CVpaUkuRFwx7mXLG9rRLpMZZaNqBy5wW2N4pk2ECPuDunI9XM1TkQhBZ6ERr:sH6jJ7XsCXin6ZkgWm4OslTjZZRr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7765db0902832db753b3828fa3e33f78_JaffaCakes118
Files
-
7765db0902832db753b3828fa3e33f78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE