Behavioral task
behavioral1
Sample
c7ff8b48b77bab5cb80dc51dffd75a88_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c7ff8b48b77bab5cb80dc51dffd75a88_JaffaCakes118
-
Size
3.8MB
-
MD5
c7ff8b48b77bab5cb80dc51dffd75a88
-
SHA1
133a104939c74dcaf28e0232264392469dadc84c
-
SHA256
d7af7255a36e51daf59ab81ec4dd459681d3119ecde3ee30f67b848568b3bf52
-
SHA512
2856078fa749d77e1dd2dc166126fc0060f9151b66e007f5d916ae609b10bf4bf11604e8ef4ea22fcf00fe770e1c485032834375e8dc1cc1373a9a33fb6f3d27
-
SSDEEP
98304:YYCW7AZ+lOXgwaNxFXQM+KZTAVfWn6VGgreSJ:WZXwNNPgM+KKfo6VGgrTJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ff8b48b77bab5cb80dc51dffd75a88_JaffaCakes118
Files
-
c7ff8b48b77bab5cb80dc51dffd75a88_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 498KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE