Behavioral task
behavioral1
Sample
7786fdea5903ec6b3fd9cb1cd5048032_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
7786fdea5903ec6b3fd9cb1cd5048032_JaffaCakes118
-
Size
976KB
-
MD5
7786fdea5903ec6b3fd9cb1cd5048032
-
SHA1
3aabd2ae1ee75b05c8e481787099a7b21df4fe2f
-
SHA256
f95b4b77e35a259cbf10fc1cb2cd35c56501482c46545fd6465bf5cda5886957
-
SHA512
d98cf218e253a8e2173b218244a708dd797d5d9d505e9510d593de8950b03837b5c259077e205c813ee0ae8ffc263788f186a0a7b230ab7002d195772018abe4
-
SSDEEP
12288:W8VLJnMjQTpckBAVLJnMjQTOos4ckBJxn4xx:zLJnMWoLJnMWOimx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7786fdea5903ec6b3fd9cb1cd5048032_JaffaCakes118
Files
-
7786fdea5903ec6b3fd9cb1cd5048032_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 200KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE