Behavioral task
behavioral1
Sample
b5843cdde9a49bad21c89dee448178be_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b5843cdde9a49bad21c89dee448178be_JaffaCakes118
-
Size
100KB
-
MD5
b5843cdde9a49bad21c89dee448178be
-
SHA1
9c9a8eb2c561e22ba0982f9ab2bfea60706ba2e8
-
SHA256
50117a6e3a457a72dc5a5b949f4bb2b56b0350e11118ddda673f291c76cba782
-
SHA512
e50a37551f697506452aef2250164718f737947489a43bcdc6e36eaafd2ca3272c1cd1c3e98bf8ff4bbd437836c7768c6bcf34dd78292a27bd3f035e92a530ee
-
SSDEEP
1536:LoDp+9NHGd/08OXnCb5wMA25PV7r23BfOCZN3NdObWSIwYKE68sIfTBvLmmRDbbE:UEch6vMAoN/2RWCv9gbFWsIr9vDbbbbM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5843cdde9a49bad21c89dee448178be_JaffaCakes118
Files
-
b5843cdde9a49bad21c89dee448178be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 17.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE