Behavioral task
behavioral1
Sample
b1ecf3d471d1cc1da8bb2dce38aaea6d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b1ecf3d471d1cc1da8bb2dce38aaea6d_JaffaCakes118
-
Size
784KB
-
MD5
b1ecf3d471d1cc1da8bb2dce38aaea6d
-
SHA1
2f51cdd6b2480e8593e2fa44e2db3a84841ded06
-
SHA256
f275219de16db039994c138dfb0344f0a6adb90e2aaf15bde735afa7dfbf20c8
-
SHA512
f9d31c9e3ca2917f7f18b1f91b1eaf70184145ab7b919fc1a0b23a8d3481543037b0da4a5bb781d547d99068d4dbade86265c7bedc39bd7c1c31bc10590e0b32
-
SSDEEP
24576:phkrqGMBZpkB69FkQ7nT7Mtqh8pugxWhfajO:QmDiB6EYHMcodW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1ecf3d471d1cc1da8bb2dce38aaea6d_JaffaCakes118
Files
-
b1ecf3d471d1cc1da8bb2dce38aaea6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE