Behavioral task
behavioral1
Sample
970d05984bf8e31ce752eda3abb6a9dd_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
970d05984bf8e31ce752eda3abb6a9dd_JaffaCakes118
-
Size
162KB
-
MD5
970d05984bf8e31ce752eda3abb6a9dd
-
SHA1
5093743db21b0a25a66c0aa19b7663862d03e288
-
SHA256
6c38e0665afe8fb2d1a04aa64411fc0758ee5b235273581f08e4048830151545
-
SHA512
4d8ccc246bebf701a773f37468d731797ebadef49e59ddbadee17e7a3dd950cc85232ede38ac77bf4914e1dcaaaf56a087145f6249e96ed6c7beb03e9948cd35
-
SSDEEP
3072:hiKGncNYsRH63cg+EQLDgd0NLFZCcdKqwePbz3sg70llvMmc866/:hiDnsbH68PBFZxdKg33sg70TMH+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 970d05984bf8e31ce752eda3abb6a9dd_JaffaCakes118
Files
-
970d05984bf8e31ce752eda3abb6a9dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE