Behavioral task
behavioral1
Sample
b11f04b1796fe2b24a5428960e3ee26e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b11f04b1796fe2b24a5428960e3ee26e_JaffaCakes118
-
Size
416KB
-
MD5
b11f04b1796fe2b24a5428960e3ee26e
-
SHA1
d160c0ec90b7c02a4339da428616c65b2c5a91ba
-
SHA256
5d12d8c7d715e980111ec339f59ca8f8c34adec411d53fd3531be9819d5b3251
-
SHA512
b48eeb0676c8e7ecd6dd2b21ececf4b3936ecd445248e33203942c704c1fe24fdfb18f95bd01ab89d1e753a187217a439e77d4e090fd6d471acc16025d0efd48
-
SSDEEP
12288:+HuaNL06AzT4OlWNDQ1YRVtWl8YKPHMWVoS:+Oa4s60AY/tWlbKPHM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b11f04b1796fe2b24a5428960e3ee26e_JaffaCakes118
Files
-
b11f04b1796fe2b24a5428960e3ee26e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE