Behavioral task
behavioral1
Sample
b5533317cc99c331a84da58da0a21beb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b5533317cc99c331a84da58da0a21beb_JaffaCakes118
-
Size
217KB
-
MD5
b5533317cc99c331a84da58da0a21beb
-
SHA1
74b4ab9819a53d6d58b410bf76d91f9c1ea4440c
-
SHA256
e1461b942bc6869c2e77c978bd5831d53f1144023f597019c233eb37d04a69ec
-
SHA512
df4d2297f50290aaaa96cf59d98fc03c9f4b0cd8d99899f618e7b80b36476a45c5f5954377f71f4c6d5e924738d7edfbf717edfc6ac89eccd56c34b0e6d69c21
-
SSDEEP
192:Q8BwnvBdf/IuDiAmTau+UiSfLv/wxvQaS0evMO:Qqc3f/Iu/WaP5SfL0vTS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5533317cc99c331a84da58da0a21beb_JaffaCakes118
Files
-
b5533317cc99c331a84da58da0a21beb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE