Behavioral task
behavioral1
Sample
b1cd8ccd897d86902f5cdf4e6f8bebc8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b1cd8ccd897d86902f5cdf4e6f8bebc8_JaffaCakes118
-
Size
601KB
-
MD5
b1cd8ccd897d86902f5cdf4e6f8bebc8
-
SHA1
1c31dde5e4290ab6c6be88ab87467df7d1ab938e
-
SHA256
23f8c6f2cffaa03ae84485a7e853995bbec43a92e648967890ca44ae4c005d33
-
SHA512
9f910f5269a4afee225a58ea8bc16206f6be061c4e1c3a2b7894bbb2b07a9e8f217a27f3a9f0002c6be47269ad3270367e8a4e7c5d04eacdbd3a13d6652996f4
-
SSDEEP
12288:Oggy/Re1M4oB7eDhldu+9qRsijXRgh3omCiBrosivE:OU/MhLu+kR3X6XMsiM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1cd8ccd897d86902f5cdf4e6f8bebc8_JaffaCakes118
Files
-
b1cd8ccd897d86902f5cdf4e6f8bebc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 996KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 600KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE