Behavioral task
behavioral1
Sample
b03dc502d8258858175490941a883d14_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b03dc502d8258858175490941a883d14_JaffaCakes118
-
Size
511KB
-
MD5
b03dc502d8258858175490941a883d14
-
SHA1
431ce6eb767ee3028c9c4013be34ff1b5b11f0bb
-
SHA256
3523e2759be58931c57b9f4e5543f5baa3e84eb9a6cefc7ec3e7e5db63436d51
-
SHA512
5e8d238b1296008ee2a9a674d86bd071e73ef67e1dad5a722c6f6a6ef0593efbea65fd52de82033915f6c206d13502b34ec9302cd57441d160e85885e09675ba
-
SSDEEP
12288:FYzjfEBEVpnwF4GCCq4d4pRlIJkFMvjH2A:FYXfE+VpnwmtC5d4mJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03dc502d8258858175490941a883d14_JaffaCakes118
Files
-
b03dc502d8258858175490941a883d14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE