Behavioral task
behavioral1
Sample
7776233c549aa8833231c366712a10fd_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
7776233c549aa8833231c366712a10fd_JaffaCakes118
-
Size
145KB
-
MD5
7776233c549aa8833231c366712a10fd
-
SHA1
b030fe83f8d2315e3650de4bbbb6f2aec8151575
-
SHA256
c97acf1c7bde25a6b16ae4014b09b1bb1d82e686a07551182b0b12b742a9e8bb
-
SHA512
f58dc29f1fa44392d4bcb157f0224f03f8ced41c1bee1bc3577a01b8130757eb7e670d3872d601ad921d558268740bfdac05dbab4a6ef4e04fbab9a3e8c2a9f3
-
SSDEEP
3072:XEML84F+IGTm+qp5GOAUoffp8eIqnGBjX3RNu5a3M9kGXGGhQoutm:XEIF+VmGOhoffLIqnUXia3MPpQoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7776233c549aa8833231c366712a10fd_JaffaCakes118
Files
-
7776233c549aa8833231c366712a10fd_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE