Behavioral task
behavioral1
Sample
78ee1a7118a5e061b858cd064c8abf6b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
78ee1a7118a5e061b858cd064c8abf6b_JaffaCakes118
-
Size
1.5MB
-
MD5
78ee1a7118a5e061b858cd064c8abf6b
-
SHA1
aad447434528a0150a70a77c175b561c44c3eb27
-
SHA256
2990464839f1ba8c1ed8e5bdddd95d5493e145afd3877714dd81c9c6986a20e9
-
SHA512
1f4bd32c7f84799758880ebb7c1a6b252b5c6b05c357a88a392a6755abf37845fb2b50e0828e12445db234d77e7fac897c6b1518500fc9ac9b264bea6207b1b5
-
SSDEEP
24576:a1Wi1DzlSNZ31B5WtZtwO+LXu80kk8Mbb36fAizw:a1DZUFuPwt/0z6zw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78ee1a7118a5e061b858cd064c8abf6b_JaffaCakes118
Files
-
78ee1a7118a5e061b858cd064c8abf6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 633KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE