Behavioral task
behavioral1
Sample
bd193b6d49fcb3857b1cc1cde172987d_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
bd193b6d49fcb3857b1cc1cde172987d_JaffaCakes118
-
Size
3.1MB
-
MD5
bd193b6d49fcb3857b1cc1cde172987d
-
SHA1
ce203540ce00122ea0b272f2e411d781eb7b1b32
-
SHA256
756c95bb85c218c640fb750501b1f74741402643d426a2edb567603b9fd314a5
-
SHA512
b40ba719e118696ff45be3c28ecb2648e5db02296b898b5a16250e5b5e5faa4cdd347df57765bc6638cb10d0e16b4809e6384fef4267df7618b8c549f65133c3
-
SSDEEP
49152:LOXMXrX0AQ+2DVTtsJObTH73Q/9ozN5mPuknN3BVAPgP26DXaLrQkkErv/vqif:qPdDVBsJyb73fvhkn3VAKIJjz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd193b6d49fcb3857b1cc1cde172987d_JaffaCakes118
Files
-
bd193b6d49fcb3857b1cc1cde172987d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE