Behavioral task
behavioral1
Sample
780d0253b8c104464ae60bf5988a9b36_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
780d0253b8c104464ae60bf5988a9b36_JaffaCakes118
-
Size
245KB
-
MD5
780d0253b8c104464ae60bf5988a9b36
-
SHA1
f1c674fb99df8629688eb7d09067a5d5792a00d3
-
SHA256
b946d01fe35f37d8148a25dcad46963731e4f51d3235ef0a68f3137479a52419
-
SHA512
19a49f1d6a5dc8eedc505e5af64a453e1b8f722722d2e8a576547845a44a1f77c6e2cc82b086d943084b79f4e6feb1e5174005e465983233d4a1e800aa699fce
-
SSDEEP
6144:YVt6H1eah3zAYic78grFME9IFWNE/hO7IUe9lOBEGeh:YaH1eah3zAK78gRMEuFsEpF9lOBEfh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 780d0253b8c104464ae60bf5988a9b36_JaffaCakes118
Files
-
780d0253b8c104464ae60bf5988a9b36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE