Behavioral task
behavioral1
Sample
b1fc14835e904c8f7de5fcd6d66dc652_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b1fc14835e904c8f7de5fcd6d66dc652_JaffaCakes118
-
Size
25KB
-
MD5
b1fc14835e904c8f7de5fcd6d66dc652
-
SHA1
518fda35889f949ff51fbf70a963776eb69f96c3
-
SHA256
c3f6b3d4aeb01ba5b3ca11b1c48f8fda888ca807f1ff2563eaa47abe4d11ef0f
-
SHA512
743203cf84f45e030ecdea517f8180dab49d4ae0589f2c2ce6791d688b128a9fa562b879c9878fe29a9cbeae56177bda2c6a470671ee465ddf41c9cad58ebda6
-
SSDEEP
192:MSxv2RkKihvYcmrnlnhQzC5almMglnKYisGhZHBOE/F66r9ZCspE+TMwrRmK+vhM:MqalnhQ++mMmnKnDrHoE/OeM4mfk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1fc14835e904c8f7de5fcd6d66dc652_JaffaCakes118
Files
-
b1fc14835e904c8f7de5fcd6d66dc652_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE