Behavioral task
behavioral1
Sample
b1cd180a388420e8dc30cf841762d2a8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b1cd180a388420e8dc30cf841762d2a8_JaffaCakes118
-
Size
81KB
-
MD5
b1cd180a388420e8dc30cf841762d2a8
-
SHA1
51d74a7354c14ecfe93127e48fc8e16d770e304d
-
SHA256
411933a80c3d878607636c0ba6e703ae9d77c07331923bab8ddd4bdf6124d98f
-
SHA512
18e4b49b5c041407d333960f7a865482d345e2c5d8f7672bcf550e1b591ae701ebf2de0f8f7257c73d1b7b17a156ddcfd3d302dc46ec05202a601fcaf5805380
-
SSDEEP
1536:yKCiiNlw+z1Z4IiCGKhF07Mlfvr3Jv9TRVpamyW3EJSLds:5i8k1QhKhFoMlfvr3vpESds
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1cd180a388420e8dc30cf841762d2a8_JaffaCakes118
Files
-
b1cd180a388420e8dc30cf841762d2a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE