Behavioral task
behavioral1
Sample
1b7af1064fcbbd7cf085a2e9848dc7de_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
1b7af1064fcbbd7cf085a2e9848dc7de_JaffaCakes118
-
Size
784KB
-
MD5
1b7af1064fcbbd7cf085a2e9848dc7de
-
SHA1
6095ed5c76e078ba8952b956ba0f33c505b90849
-
SHA256
fb4da326c6a5d977c38e8a2b3e0ce72e6efcf29137e13af64aa931e6d92b4f19
-
SHA512
0ac503037b3de149dc277ca871e74c267319b1122903c2cca23f40f6bc111c55daab0bad1c91270b11681963c25f503ef9b721f3c3985f6893510f5185a71617
-
SSDEEP
12288:yS+JrdNxRtUHffBf+j4md87guHdKhtTMW687bNIh6yUSen3Ahv1yL+dM6Hp3T:b+JrfrtCJ+kxt9AuWBbS7UfG8l6J3T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b7af1064fcbbd7cf085a2e9848dc7de_JaffaCakes118
Files
-
1b7af1064fcbbd7cf085a2e9848dc7de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE