Behavioral task
behavioral1
Sample
78e0a6b88a1da783f7b3e1753bd5c2b9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
78e0a6b88a1da783f7b3e1753bd5c2b9_JaffaCakes118
-
Size
784KB
-
MD5
78e0a6b88a1da783f7b3e1753bd5c2b9
-
SHA1
0a5aa75cf480cfe854d6071400d184f477891f18
-
SHA256
6a7c9db40de8e4e56655ae6fa7731511fdc9c90d792e4751c869ad26abe1f268
-
SHA512
962f184a9e0b706e9d306fe08917312e303c0ae140acc501d38d3bbb6825e4e245edf6f4ca52e936c598839c81f661b13d28667bd987006fe2384e4aedb0a4de
-
SSDEEP
12288:ZT9+0JRnEZCn7EJrczO9iQ0JpAj4oT+ebF9hTVVTR8zazJGtv2LN0xvMqGBq0l:v3JlEZC7LOYQ0jyaWF9hftPFGtv27M+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78e0a6b88a1da783f7b3e1753bd5c2b9_JaffaCakes118
Files
-
78e0a6b88a1da783f7b3e1753bd5c2b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE