Behavioral task
behavioral1
Sample
b1580c328a941ac75a14f795412bc722_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b1580c328a941ac75a14f795412bc722_JaffaCakes118
-
Size
152KB
-
MD5
b1580c328a941ac75a14f795412bc722
-
SHA1
023576ad354446d66df5eccfe81517ad93bc2675
-
SHA256
e4f585f0fd49cb1bdb26b7de4e2c7b36bdb39806dd5f6f28f9785d44dfd5a0e3
-
SHA512
e8b49a4ce4795ba4b4b96fe9d6ec83a2c895850e823b54c3208a1d3e4545effec1451fbe9f74b645152010197d06e634efbc78b5899c6c50fa334a3284d11ff6
-
SSDEEP
3072:g47L4qE4Pwf33eOCRAHlQ/h9z7D0C4wS6QyO8sjE6rciiuGL+ouvc:g434yO33ePRuwH7D0CfS6QyXsw6rciib
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1580c328a941ac75a14f795412bc722_JaffaCakes118
Files
-
b1580c328a941ac75a14f795412bc722_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE