Behavioral task
behavioral1
Sample
c819d744eecad0a458933ec3eb7e7c6a_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c819d744eecad0a458933ec3eb7e7c6a_JaffaCakes118
-
Size
784KB
-
MD5
c819d744eecad0a458933ec3eb7e7c6a
-
SHA1
7470752d10420e599dcc53509c95e38e69eb295e
-
SHA256
7ee2a0c3f81876bbccd137b62efe0c71447f365e8921f0c4a1e05ac006904b7f
-
SHA512
d9a672ca8eee3afe9e7289fa30b11891c360e89fb1aadeb28e5d1ce11f6fc98647aa908eaee020f9268ef021c9128f37b7777f3f27dcc305a38853b75e4c281c
-
SSDEEP
12288:AU//2ybdat680EzYtMKV63zuH8tGGxH6qK2q7EgO5tvBrbCHXMvXyp5uAKk5RM:lX2yb3TtMf08kuTsQDrbmClAK8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c819d744eecad0a458933ec3eb7e7c6a_JaffaCakes118
Files
-
c819d744eecad0a458933ec3eb7e7c6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE