Behavioral task
behavioral1
Sample
c1d60b781ddbf063fc6f324f99fec018_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c1d60b781ddbf063fc6f324f99fec018_JaffaCakes118
-
Size
274KB
-
MD5
c1d60b781ddbf063fc6f324f99fec018
-
SHA1
ed39c2c4484fca0116e210758b7c5061d4291043
-
SHA256
e68cb519e3277ac695cc2ffb9b76f89c3590b96e241b6ad189657049a6ec7e38
-
SHA512
73eaabb2a63e041e8acbbdb4804bbe8993fd6ffc1792794acf4e46605de67acbd392463ccf3e8f5e5d0d5d6f8d73ac2a7825ba4f5808ce43729648fb78d12b2e
-
SSDEEP
3072:lkEHpEPoSvpo36Bg0NPXBWTt7SitDg7u2SbpVaWiVS1IZuL:p0oiolkPUTVg7IQWV1I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d60b781ddbf063fc6f324f99fec018_JaffaCakes118
Files
-
c1d60b781ddbf063fc6f324f99fec018_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE