Behavioral task
behavioral1
Sample
379a98304ccd5d0f12f11d4afd08a574_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
379a98304ccd5d0f12f11d4afd08a574_JaffaCakes118
-
Size
172KB
-
MD5
379a98304ccd5d0f12f11d4afd08a574
-
SHA1
714f90d1c0ff1d813cc9b450a3db07af66b4218b
-
SHA256
a271d15ca177d6e1584981b2f5a0761241fe4ed5ff18785c54b995705380ecbc
-
SHA512
cee0aba6be19c718b9f587544d954e532d0f60d1f8ba0640713844cf26a672c30a71212cfac442d1d42f2159848ab7bfc2b41ac06a9037ae10698c3483299d69
-
SSDEEP
768:F19qYnENpsfQ+aDqAw+t6+uD1WA8u2qDONeo7IiGGjL0njcL6kjiMtmi+H+XfllK:f9qYnEuQ+an6Wb3oGjL0njHia1VkG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379a98304ccd5d0f12f11d4afd08a574_JaffaCakes118
Files
-
379a98304ccd5d0f12f11d4afd08a574_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE