Behavioral task
behavioral1
Sample
b0ba3ab66fe74d376579d6d8bb0cebdb_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
b0ba3ab66fe74d376579d6d8bb0cebdb_JaffaCakes118
-
Size
4.7MB
-
MD5
b0ba3ab66fe74d376579d6d8bb0cebdb
-
SHA1
fd44d90fce7a00ca3909075c9e230775cacad8d9
-
SHA256
2526d40a47eb3d7f1a85bb3ef34157b5da511ec481bd59fcb4ac9583910d17f9
-
SHA512
c3120606ed0c0c6eea9d1566c71a6f1ae62c23ad1f1d6e692a27010d58d8a9c2fbc0e8bdba32290e09410be284a8491a7d7a833e8acc8518bc8a0a0154748b7e
-
SSDEEP
98304:TC6Qy6r3jIdh0TVmtavHZl9t3sGPmF6NrsiMFyCG64ZUnU7K:LX6rzw0TVzv56X6NsPftU+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ba3ab66fe74d376579d6d8bb0cebdb_JaffaCakes118
Files
-
b0ba3ab66fe74d376579d6d8bb0cebdb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE