Behavioral task
behavioral1
Sample
b0b19b1573abe90592dc44c5571a1f73_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b0b19b1573abe90592dc44c5571a1f73_JaffaCakes118
-
Size
84KB
-
MD5
b0b19b1573abe90592dc44c5571a1f73
-
SHA1
bfaf10901814ead2437eea0089eca99cea7c922b
-
SHA256
d49805d6f16474fa26212a483cce19dc1b6179d66c92ff659a47125df4050a19
-
SHA512
bda650ae757d7cfe7c652e47bee7440c6cfdc383dfa8cf5bf574a6bf3bcf44dfca16642f02a49e9e36e3a64f18a6e2b8e9b9cdf3ba0b2caff15b5da8ef889321
-
SSDEEP
1536:pyY5R7a5Nr5jdFEOHSr2ssFegpgCOzINBtCkTQY4:pR5R+5Dd5Hmw4IN3Ck8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b19b1573abe90592dc44c5571a1f73_JaffaCakes118
Files
-
b0b19b1573abe90592dc44c5571a1f73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE