Behavioral task
behavioral1
Sample
78aaa275198e2979e028873fc9bcb7c6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
78aaa275198e2979e028873fc9bcb7c6_JaffaCakes118
-
Size
557KB
-
MD5
78aaa275198e2979e028873fc9bcb7c6
-
SHA1
97a33e8b86cf511fc5d116df0d90c0d39cc4c794
-
SHA256
ca33949e43cd2103472b9d3bf60329d2c60b86d51964911044621251cfa0a1eb
-
SHA512
f992fcf1453b66c55d5369633ca2388d3ad71e32be7690b7a122c6b61afe74ebdbda7d5e7e59c9b417c03fd49d46373c1bc88fb82df6bc84e1e0ce64b2362e8d
-
SSDEEP
6144:FxCIqMUcsrgENAnR14Uyf93PypZ1bxb0Bvc4DWV/b5eR:CIrUcsrgENAnjc90ZbAvJ0MR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78aaa275198e2979e028873fc9bcb7c6_JaffaCakes118
Files
-
78aaa275198e2979e028873fc9bcb7c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aDATA Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE