Behavioral task
behavioral1
Sample
84b7340d0c1e63235ac6286b888b890e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
84b7340d0c1e63235ac6286b888b890e_JaffaCakes118
-
Size
746KB
-
MD5
84b7340d0c1e63235ac6286b888b890e
-
SHA1
7e16ba67ff7a04cdef088fdd5847492deabf966f
-
SHA256
fa5f85b88156c633483901e546647dba6b8e419241276531c2369d6617379246
-
SHA512
95a0b3f11b16aefba368f3009786e1ff813f72edfd1586dbe038858ebe0d3bfe16adebc707cdd26556a6597faf98c58c3dcfe15a642fb99eb8cb34c7aee5b254
-
SSDEEP
12288:zOR4rRuKq1MvDPDfm+MG1zjCb1IiFDvvIMFK8HRyoY8UKkpE4k0h7PPl+p8G87Wz:zOarouPfm+M/kpki+258a+ia
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84b7340d0c1e63235ac6286b888b890e_JaffaCakes118
Files
-
84b7340d0c1e63235ac6286b888b890e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE