Behavioral task
behavioral1
Sample
b932098e6799a6348a4fe54c6439e0c8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b932098e6799a6348a4fe54c6439e0c8_JaffaCakes118
-
Size
229KB
-
MD5
b932098e6799a6348a4fe54c6439e0c8
-
SHA1
eafef6967dd35ef2a82919f4e2920a74d6e9fff8
-
SHA256
26e6ef87afc5e77db013b7e1c121e9852698ac236c990cff03e7cbe13866bfd2
-
SHA512
47dc06212d60850a9cbef8d2af1a8cd8cd1944efff3aa58f19d71a35efd318021e5cae97ff388bed3a9c586659f3107a39a61a914cc339b793da275e4055cf0f
-
SSDEEP
6144:WoGILnlGjPWQB4L0P5nQRP30qBpWt2TzJZxwX7admf:WIw3BTRg3nBpW8Tzn7K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b932098e6799a6348a4fe54c6439e0c8_JaffaCakes118
Files
-
b932098e6799a6348a4fe54c6439e0c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE