Behavioral task
behavioral1
Sample
94f652b5c5331b8172e6c4b9ed48f7c1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
94f652b5c5331b8172e6c4b9ed48f7c1_JaffaCakes118
-
Size
784KB
-
MD5
94f652b5c5331b8172e6c4b9ed48f7c1
-
SHA1
a57a3c0198a9b868d2f974aadc120b16988e0f27
-
SHA256
55aabc2620d7c691444dceb92d496f33fb321a51261d0844a6bb91db9fc34dad
-
SHA512
80d58c41d9cf705b82eb8c090cb2258c3c1d0df8da5c22b46bc4b8d83103289fe98b1c2d86f995c4691d9e01536db74be22ada16730f77a832f7c8dc1efe02f6
-
SSDEEP
24576:EJQiAZQlOmwXG7u41K49jNzMpfrLuhUu2bBHS:EY8Z+49pzMpfGhU/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94f652b5c5331b8172e6c4b9ed48f7c1_JaffaCakes118
Files
-
94f652b5c5331b8172e6c4b9ed48f7c1_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE