Behavioral task
behavioral1
Sample
be7d70a9fb957e99d8cdc35051c8ab13_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
be7d70a9fb957e99d8cdc35051c8ab13_JaffaCakes118
-
Size
784KB
-
MD5
be7d70a9fb957e99d8cdc35051c8ab13
-
SHA1
e22050aead6a4e1da9e3f507211321acdb6c7dd8
-
SHA256
3395710de3c9946f4ff6bcf2eacd5cb8c80c9e7f0e7b60224a33cd1d3ecb2610
-
SHA512
f6f42c7d8e50a9d0a6d05fb037c4682ef54578c581733ac43ac3e1c9716268df775315f5cf7034b766e7a2d73fad6e6fb912a43ad0c4b8613e6b088c2e5cdc27
-
SSDEEP
24576:13CThGtaMUHff725oBe89wwsZ6rOWjWAf0:13Ev/f7InkPscrOas
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be7d70a9fb957e99d8cdc35051c8ab13_JaffaCakes118
Files
-
be7d70a9fb957e99d8cdc35051c8ab13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE