Behavioral task
behavioral1
Sample
b0ae68360a5c281bfa9883bb8ead8ec8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b0ae68360a5c281bfa9883bb8ead8ec8_JaffaCakes118
-
Size
6.4MB
-
MD5
b0ae68360a5c281bfa9883bb8ead8ec8
-
SHA1
16279c9d20acc8c4be24396727435daf3b53262d
-
SHA256
39e6044c839dd0dcff037055d08262d09e855f4da6c91cb1edc83c514e5252c2
-
SHA512
8bdccdc08ecbe01efda50d5c41761fa90fc390d44a10a7f261e84930b3a440d2bc47b679d73b79f000ae98b01c0d7f68b147c0fa30eacdd2d248c4e459671072
-
SSDEEP
196608:HGtKTYrdlfSYodl41dlfSYodl/Eg0AdlfSYodl41dlfSYodlO:mtKcFyEgXF9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ae68360a5c281bfa9883bb8ead8ec8_JaffaCakes118
Files
-
b0ae68360a5c281bfa9883bb8ead8ec8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE