Behavioral task
behavioral1
Sample
30d77d021215e7d27a9aa8b9da017560_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
30d77d021215e7d27a9aa8b9da017560_JaffaCakes118
-
Size
72KB
-
MD5
30d77d021215e7d27a9aa8b9da017560
-
SHA1
74a7c669e0c6bb49a536c2fad77b3843da1cecbd
-
SHA256
156c5d00cbab41ad585318e4127a0178b3a508fd69ee99296312e013af892526
-
SHA512
8950d6960ea2420cd3c987c73636beac8cd69a5e3cabcc495e14c37bb2793f9ddffc70420cbc0e03681ff15d90772ca1b84c475dcd50757a1311a71cf525164a
-
SSDEEP
768:VeFtdWI2uGKqLQEGufLllNjXAlj3wkkukge:VeGulqLQITOlj3wk3e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d77d021215e7d27a9aa8b9da017560_JaffaCakes118
Files
-
30d77d021215e7d27a9aa8b9da017560_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE