Behavioral task
behavioral1
Sample
b139815c90e2d47e98a9884ecbbabc14_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b139815c90e2d47e98a9884ecbbabc14_JaffaCakes118
-
Size
31KB
-
MD5
b139815c90e2d47e98a9884ecbbabc14
-
SHA1
86d0943616f8e6d087606c86123d3e7d055ebc7f
-
SHA256
423b3be6660c4efad88d7351bb2a8c7c2a0f694bfdecb6bdbcd375970203dcf8
-
SHA512
760d0e783c08fedff667ea29e838ea0444e44d9bade1ed6d3205d564b242d6f4a4b617eed683b7c14b8b07b0e7a650a670a92bb135036c96e714ad3983a4ab9b
-
SSDEEP
384:rm/wB96PFA56LwjR94MwP3z6rMiaFbXtcSsTEB4Q8rjUwrigogrW0OtBH8iFfQEy:LBz6sL4H3+A9cSZ4Q8ygrW00ciO4pqc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b139815c90e2d47e98a9884ecbbabc14_JaffaCakes118
Files
-
b139815c90e2d47e98a9884ecbbabc14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE