Behavioral task
behavioral1
Sample
b03fb9a34aa30c6b62b11901efb2da41_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b03fb9a34aa30c6b62b11901efb2da41_JaffaCakes118
-
Size
126KB
-
MD5
b03fb9a34aa30c6b62b11901efb2da41
-
SHA1
b18b2b793970fa94ad01a6d654d5eb2cc893776f
-
SHA256
217a4f57a8ea8996476ca72cdf4d4021d1c7a5708776592269f86aed70b2039b
-
SHA512
c30e1a6ca5f9f44079a4d00fd8d4d411b9382205901452f658e228a52a7bfd55207f338622ee51d5f2123a171676b15e239713a5519ec1d449ac7e4dca696aad
-
SSDEEP
1536:EuDY6y1bIIENVo+hAt4Lh5yQzlU3yiFzCGg13eRilckCQ1pDkVTyF+lpc:EuD0XGVdhA8lJsu7akCkYl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03fb9a34aa30c6b62b11901efb2da41_JaffaCakes118
Files
-
b03fb9a34aa30c6b62b11901efb2da41_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE