Behavioral task
behavioral1
Sample
673cba7b91b43866a8e63bccb4163df2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
673cba7b91b43866a8e63bccb4163df2_JaffaCakes118
-
Size
125KB
-
MD5
673cba7b91b43866a8e63bccb4163df2
-
SHA1
78829d73bf718b98829a780fae4079123fa10003
-
SHA256
bffaaa5f1a96f135524630d67c944bf297e81009e45a26aea5ce6ce8db896de6
-
SHA512
a709ef8d3b54c7f605de11dd5e4b7f6a7b71c848645f7aac162a69b77bd8575506643f36a6ffd1cbac066963c594cdd5cc1df790e4876faf676e8d777318d879
-
SSDEEP
3072:FGNW7dEvotvXjz1brx4Dn6J7VYvDhCHR05sJ+gtN5:FGNW7mvIfRWnpLha05s5X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 673cba7b91b43866a8e63bccb4163df2_JaffaCakes118
Files
-
673cba7b91b43866a8e63bccb4163df2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
csmdcsm Size: 6KB - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE