Behavioral task
behavioral1
Sample
b569d6ee7c7419d32a96e76625d43031_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b569d6ee7c7419d32a96e76625d43031_JaffaCakes118
-
Size
784KB
-
MD5
b569d6ee7c7419d32a96e76625d43031
-
SHA1
c6bc729be02380d84a9244de211ed9691f20c40c
-
SHA256
fabac812d6bf803131cb329567a1b7e1f33d53e71aff9cb3a67de329649e277d
-
SHA512
b60f10e3ddd6e157e0c7c29e8e3877f6ca13091e4e0f2a72aeac42d52a2fa36c759669b68e7151406e90afd419480ccfb3cae022ffb4be6f5a0f2fd7c34dadb0
-
SSDEEP
24576:3xrcofPfzLki4/CepveQVk1BhHjjiSISX6:B5fJCCKvBCfHjjFH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b569d6ee7c7419d32a96e76625d43031_JaffaCakes118
Files
-
b569d6ee7c7419d32a96e76625d43031_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE