Behavioral task
behavioral1
Sample
260b6f8b452d5d4112bc1eef7efdb69e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
260b6f8b452d5d4112bc1eef7efdb69e_JaffaCakes118
-
Size
695KB
-
MD5
260b6f8b452d5d4112bc1eef7efdb69e
-
SHA1
4cde37403ff2c26271df7e37649df98c9f5e7420
-
SHA256
d6db2a5ce545889315e3fadd2f335091cd177c032d540141dd62138b18c36f92
-
SHA512
8aaf3cead3cfadcc6bf244efc501b0415bf268ae3dcce91a428b4caef7be282890f2b13ad4c6a8997153cd6dc6afd87fabb0d3bbeef4ad81202411c409918ed2
-
SSDEEP
12288:5vANUpEbyM1u6mnzfi6hBRfjQLq58oVCWiG6NIIF2S4bm9F3menEAMSrU/+OC:C1u647iI7Uq28iG6N9F2Sem9FdnEAMAO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260b6f8b452d5d4112bc1eef7efdb69e_JaffaCakes118
Files
-
260b6f8b452d5d4112bc1eef7efdb69e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 683KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE