Behavioral task
behavioral1
Sample
862a78f0bcb86c20fd51a6adb70a9be6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
862a78f0bcb86c20fd51a6adb70a9be6_JaffaCakes118
-
Size
438KB
-
MD5
862a78f0bcb86c20fd51a6adb70a9be6
-
SHA1
22d47e254ea9efa3c1ded3b46cae6b245e3882cf
-
SHA256
bfc5e7b73bfe9c1beace36125da4428d981c4841898dabab18a04fa7ff689d03
-
SHA512
465d8668567c1689955dc40f3427b1af6a2a08891509311fd1970f59574c5eb9e3ed6a421ca41f64efc939dfc85d79a84876d086a792a665c5b72bd012d9c355
-
SSDEEP
12288:VzL90nof+ogCJk4x4jNL2oozVwZzvbPLEvcPRzaOX:6iHgC7x4ZL2oMVXyRzD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 862a78f0bcb86c20fd51a6adb70a9be6_JaffaCakes118
Files
-
862a78f0bcb86c20fd51a6adb70a9be6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE