Behavioral task
behavioral1
Sample
78c0ed8e583dcd734efd6bba9014f1bd_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
78c0ed8e583dcd734efd6bba9014f1bd_JaffaCakes118
-
Size
173KB
-
MD5
78c0ed8e583dcd734efd6bba9014f1bd
-
SHA1
4e775429483f3d5c8c294cf214c12c8b0f414050
-
SHA256
7d8a84062838f00c79f60755dffe788ff412ae2a62f6cfb30632b642f0ccf09a
-
SHA512
c832687b43d71c31d133e60ea5894f2befbb51999b53a4f4729772b75d8432940966595ac72548e9cb152d595c20a3ec8cd39fe1da3b7c361d5e8b3ca2229f69
-
SSDEEP
3072:ITwMDctISTSdIJZQIIeNOva4kgOE6lYjjQ9m6IUDNQIOWWyqqx57o9qplETG:EmaEv9SkgmAAm67NQIOry1o8W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78c0ed8e583dcd734efd6bba9014f1bd_JaffaCakes118
Files
-
78c0ed8e583dcd734efd6bba9014f1bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE