Behavioral task
behavioral1
Sample
b726c79c574d1272c7e3a9b1087a6ae1_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b726c79c574d1272c7e3a9b1087a6ae1_JaffaCakes118
-
Size
203KB
-
MD5
b726c79c574d1272c7e3a9b1087a6ae1
-
SHA1
d7a70064cd65f6941581768d53f068f982a3e18f
-
SHA256
16f3b9fd7acbb313608d6649b4c7b0f92cd9db3843e2a2b65efda2c5fded56a8
-
SHA512
0b0262c97a189a2cc624cddc38d07067336544eebfdf33d12b87c8630946a9f462d53a46d74876ad9e6ae05623f165c43141170923ccea3e87943bb4d1b2a395
-
SSDEEP
6144:xZC4d3lbxc6wU/UP+XhdMRFD3LAwektHoSAg:G4dMRU/UP4heFjLDFtHoSx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b726c79c574d1272c7e3a9b1087a6ae1_JaffaCakes118
Files
-
b726c79c574d1272c7e3a9b1087a6ae1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE