Behavioral task
behavioral1
Sample
791f7de992b6bdb1f0651d6b4be83e61_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
791f7de992b6bdb1f0651d6b4be83e61_JaffaCakes118
-
Size
123KB
-
MD5
791f7de992b6bdb1f0651d6b4be83e61
-
SHA1
a40b2eda41a3a5a9723002823bd52dcf4160dfe8
-
SHA256
fce7d4e491a28032902ea87de80b5b8ca803a42404b69405d3964d1c9679d2cb
-
SHA512
06bc5576f4bc79d89aba5883cb8805ab1b7475e0d69d646144f2056ba8271f2dbe98aa59fb96fd795751f8159d360ef3bdea7c8c34ee6b94575a3afc000dc918
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLWi8H:OVYrJrOSsRwcp0L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 791f7de992b6bdb1f0651d6b4be83e61_JaffaCakes118
Files
-
791f7de992b6bdb1f0651d6b4be83e61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ