Behavioral task
behavioral1
Sample
07bf062b4234d1d8a75da19c32785a90_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
07bf062b4234d1d8a75da19c32785a90_JaffaCakes118
-
Size
185KB
-
MD5
07bf062b4234d1d8a75da19c32785a90
-
SHA1
9537d62e35ab43da946042fca1de559f21d83cea
-
SHA256
e263952f8b0f5f64e08a836103186b6c67ab3ba09f930594cd2b6d78b9c5a850
-
SHA512
e4163ac36511431e32de7ab1f228e24a42221aae602082e984b44b076a20f4c749a89885966a185338dff82fe553880cafe380a1f503a3f13db3e76e6eed4793
-
SSDEEP
3072:3SDjnyWx0Q71atpzkkbrC71xw8KExf71lc3Y8lDAtGo449GHIe/odXmQK9j:yjnyKwfK71b9Be3l5AkT4et/kXXK1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07bf062b4234d1d8a75da19c32785a90_JaffaCakes118
Files
-
07bf062b4234d1d8a75da19c32785a90_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE