Behavioral task
behavioral1
Sample
83c96dec061e0fcf2fe46cb4fbfb61b1_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
83c96dec061e0fcf2fe46cb4fbfb61b1_JaffaCakes118
-
Size
449KB
-
MD5
83c96dec061e0fcf2fe46cb4fbfb61b1
-
SHA1
680c9f75426e86e0e5640a2eeabc5184643c0b9a
-
SHA256
e516d74fb77bfca85a8e18f1c6daf133b4849a88417dc96c42fa8ab7cf828a7e
-
SHA512
a697adf4ded39f213c4ef5dc711ee095b17ac2a21f2e747c4cc79c44fcf009f6d54f074ef684c2a1754fe0bc89689a19351ebacc67502117dcb712942462e1be
-
SSDEEP
3072:D7PLHY03YRzWGnD8PKALyPGWBQ6GTguveMV0QG0ZRC24KAt9zILGklhCwi0WAi8I:M4ukKKMvm64gKG07NzAjybhdlfGoSI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c96dec061e0fcf2fe46cb4fbfb61b1_JaffaCakes118
Files
-
83c96dec061e0fcf2fe46cb4fbfb61b1_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE