Behavioral task
behavioral1
Sample
c1259719d5d78cc3ba542a8280efc7bb_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c1259719d5d78cc3ba542a8280efc7bb_JaffaCakes118
-
Size
784KB
-
MD5
c1259719d5d78cc3ba542a8280efc7bb
-
SHA1
86168acdf9ecc5eea1f69b4a2b770a1f62931a02
-
SHA256
18e6150eb474d898e1d450618e4005e9e7b31fc64d9d8dec6f9de1d4288155c1
-
SHA512
097423d80eb9f809f64b84222425168849296c99774a36d9bb46556e43f9126f0765e528a408e671be06d9b9be3e7b8b70d959fc92a2b52d38b04d25cda93122
-
SSDEEP
12288:r6ItvU/iJbzmnCkHOBV7MzGz68jfUUpVxZNB7+lfv4P9d3I71nV+w8uN7bFf3Gq4:uIRFzqCkcVvz6SUUJBavOY718W9CT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1259719d5d78cc3ba542a8280efc7bb_JaffaCakes118
Files
-
c1259719d5d78cc3ba542a8280efc7bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE