Behavioral task
behavioral1
Sample
b0b5ec70801015b9a566554560afca4e_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
b0b5ec70801015b9a566554560afca4e_JaffaCakes118
-
Size
1.5MB
-
MD5
b0b5ec70801015b9a566554560afca4e
-
SHA1
23e7750e26574d393a0019bb34b164c6ff9838fd
-
SHA256
5eab3997ca4651231e593048dd6fa352d581897fe1f6cc01d7d90730a7128081
-
SHA512
4c6699329b63a25c6f8d5d652c19c375ca3c73e48d8fc3b6aeac004f7991063d3345b9da632cd31e8154ad8ae94bf34b23edf46f9e9bb966515fb00b7a7fca59
-
SSDEEP
24576:W1ggQIcPTCdSQVTN1TZur+zMIZZ6yp2y3cJQFHHeAu7r6LKu/+9sf:uciLTy+zjZ6ydLxUr4/+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b5ec70801015b9a566554560afca4e_JaffaCakes118
Files
-
b0b5ec70801015b9a566554560afca4e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE