Behavioral task
behavioral1
Sample
57780e7e71c44295dce954e88d1f0a96_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
57780e7e71c44295dce954e88d1f0a96_JaffaCakes118
-
Size
266KB
-
MD5
57780e7e71c44295dce954e88d1f0a96
-
SHA1
c291a2e0a2a87b4e19056e694a7bb390e5e1d7b1
-
SHA256
acfd19047a609eed3ca79adef2470363732ba57bf229169d038ed38f0a86a8c2
-
SHA512
e6a6447767b83be8e51f46729f7f647d9ea5433b3747b0abd0715290416953193811de2f08a71462d94c21d67dfedf90ba6b3df8ba6557b067e77d5c9c65a95d
-
SSDEEP
6144:wbg6ObSPz+4nDl74JUJTAynbOyUisslcttJA/xd4dn0L2h33Q:w06qSPrnDl8JwEWayUis6cBApSdnhO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57780e7e71c44295dce954e88d1f0a96_JaffaCakes118
Files
-
57780e7e71c44295dce954e88d1f0a96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE