Behavioral task
behavioral1
Sample
974b2aced87f1e4c7519785ee7a297b8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
974b2aced87f1e4c7519785ee7a297b8_JaffaCakes118
-
Size
235KB
-
MD5
974b2aced87f1e4c7519785ee7a297b8
-
SHA1
c1a697050a8842ef181e1af4d0c99bf1e9a22e62
-
SHA256
ac6b7c68d0cafb634b355c155fb702140d3e7c64614a8b33f94e5f53860531c6
-
SHA512
e76bbd0166e57f93de07bf09b955d21227cb6f5abdc111fa093110b743cb6568cbf58b652291ba3b4bdc10dcc18eac40a1a6bcb500c019f52ec3e1245624209e
-
SSDEEP
6144:ktX6ZVlJ3Z+EaoU8v5VXwlY3WedBNZap3Rm9:IXyV9zU8R9wWmj3Rm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 974b2aced87f1e4c7519785ee7a297b8_JaffaCakes118
Files
-
974b2aced87f1e4c7519785ee7a297b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE