Behavioral task
behavioral1
Sample
84c0158efe2219fea0b8be907c1d2d52_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
84c0158efe2219fea0b8be907c1d2d52_JaffaCakes118
-
Size
282KB
-
MD5
84c0158efe2219fea0b8be907c1d2d52
-
SHA1
606dd795fc14607981cd258aacb94936e28f9965
-
SHA256
9fd62a0423c1ceab7227a0e31bf9e983f5dd1d4d106ccad4bc298f99ba83eb5a
-
SHA512
cfc45201f474b8aee646c73e177d68fbb67e6d5b8c7fd1c4be2ec6476378902a0d2590fe9702fcd3ace057a5518d780734b524bba719fac0390112b9609e3666
-
SSDEEP
6144:stvLtPgR9Z0w2NJuzbYaqegeWAQQ8Hm9S5tzo1WOX3Nanu4:cjtPg3Z0YJgh7rHm9S5tUX3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84c0158efe2219fea0b8be907c1d2d52_JaffaCakes118
Files
-
84c0158efe2219fea0b8be907c1d2d52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE