Behavioral task
behavioral1
Sample
f7245b595f53098281eee34a5ac99d03_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f7245b595f53098281eee34a5ac99d03_JaffaCakes118
-
Size
623KB
-
MD5
f7245b595f53098281eee34a5ac99d03
-
SHA1
23d8ef9eeaebea4f1ec34ced3f7d01c6d7e4d0c0
-
SHA256
1438eace4f510805526f5b1d1107fc26d09db558c0bf16837a2d6b6a46391408
-
SHA512
81dda07659d07927576efbd30b7154fa89c0986dc69d83c1bf30294544234a866e2a5ca283394a8eaa66e51574869eeb49c4578b3f9bf1886bed469b6f3d77cb
-
SSDEEP
12288:5S4vBqiIBG1UVi92Ec6P8oD1m4X9K1MFf1LtqS8yR9lA8:JZgWgEc6Px1m41FNLIW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7245b595f53098281eee34a5ac99d03_JaffaCakes118
Files
-
f7245b595f53098281eee34a5ac99d03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE