Behavioral task
behavioral1
Sample
c7e2c2ef5afc92f85781417a56d58da5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c7e2c2ef5afc92f85781417a56d58da5_JaffaCakes118
-
Size
48KB
-
MD5
c7e2c2ef5afc92f85781417a56d58da5
-
SHA1
c1f9247fd6d0bee3e9f2bba4969ebfc13e087601
-
SHA256
9e8a413df35c198f2dcc8e93eecd7cdefbf44063d3920d5a7550b447e16cc9dc
-
SHA512
a5c1fad554a63d84cb4743678929a9af706defba84f60d7f19ced286eb48ec32c66b99eae1694b93441e91d03630094dae1f66261300868fee6795e92248708c
-
SSDEEP
768:txC/0SYvtTvxdLlUJltMimUH6X7uVZyp7ZN1OlRncWwccqIEt2:txk0PJzUnT3CUe1NcDncW9ccI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7e2c2ef5afc92f85781417a56d58da5_JaffaCakes118
Files
-
c7e2c2ef5afc92f85781417a56d58da5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE