Behavioral task
behavioral1
Sample
81d766514408fdd500647d39dab1e9ba_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
81d766514408fdd500647d39dab1e9ba_JaffaCakes118
-
Size
424KB
-
MD5
81d766514408fdd500647d39dab1e9ba
-
SHA1
0fd5743cc922ebed7b29d3e4cdc7acc18c4e6ec6
-
SHA256
76377576f4dfed380260bd379012d6df3934e1e59f7b769551cb4f597e337dd8
-
SHA512
f570774277c98e1cebd28c97b26ce94635cd1ed3f145c10f96330ef4fbda922b863f9a726dae4698ee6110302564eeaa9cc59f7ec699d34492435286168a3666
-
SSDEEP
6144:EbYRRaSRqfoQ8cAfX2oVoG+Mfty1XGra6LFYjG/oIt4DJA:XuSRE8BfX2PDQMNuPL3/oIt4DG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81d766514408fdd500647d39dab1e9ba_JaffaCakes118
Files
-
81d766514408fdd500647d39dab1e9ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE