Behavioral task
behavioral1
Sample
1798dc8c8c387e424a8d12b29be011a8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1798dc8c8c387e424a8d12b29be011a8_JaffaCakes118
-
Size
229KB
-
MD5
1798dc8c8c387e424a8d12b29be011a8
-
SHA1
6f51ed19b69cb3e02aa73fd32496dcd7b000b258
-
SHA256
1ef08faaab7b96587e8aa4d83155528578b43fb78edbf0c341959a6045f2a5e1
-
SHA512
de1323edcda8c6915575244c79cc1454e6732d3fd8a4d76a1d414385490b4d266af1deea34566d62531c453d67ff34aa4d54b7802e8e50049d77b1c17c99cb61
-
SSDEEP
3072:L+thiA2DfY1q3g8C/ykNQAqlk0qeRckwOq4RJR99tzCJ+wZ/9UK6Xwg1iFsYHkp:6thiAUwz8CDKAwbqeXP3L96ZVBg1c4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1798dc8c8c387e424a8d12b29be011a8_JaffaCakes118
Files
-
1798dc8c8c387e424a8d12b29be011a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE