Behavioral task
behavioral1
Sample
b21f7c02bad1ac5a7ccdf3b472573c06_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b21f7c02bad1ac5a7ccdf3b472573c06_JaffaCakes118
-
Size
443KB
-
MD5
b21f7c02bad1ac5a7ccdf3b472573c06
-
SHA1
cf72cee3bec4126b90364d3408333d6ad932e041
-
SHA256
1fcff57587d484fa57e9564bc8d5b6fc841aefae0361c173053ef06d3a3f4e4b
-
SHA512
7f86ad8e4cde2644b33b010159a95179bb600a6802bcaf6b32f3220a00e5d608ba606ee04311a6ef045c61cbea3c39b1f9b80c9b7d434b84dc95a66a41869896
-
SSDEEP
12288:4urpcmTzm7IBhWvOJHK6AE1T07W0BtHkvYqpLCJYNryp:xqm0a0+AJYN2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b21f7c02bad1ac5a7ccdf3b472573c06_JaffaCakes118
Files
-
b21f7c02bad1ac5a7ccdf3b472573c06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE