Behavioral task
behavioral1
Sample
b1ff1b44f4286bcdc2625e7c81c089b8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b1ff1b44f4286bcdc2625e7c81c089b8_JaffaCakes118
-
Size
711KB
-
MD5
b1ff1b44f4286bcdc2625e7c81c089b8
-
SHA1
740f3139552ee47665f328356ed03132658bfad4
-
SHA256
04817370a946d0dc27b5f6185a5946bb40ac61f3358172cad7c3af707c00dfb6
-
SHA512
cf05e363851c17d67c9630d33a9866966699ab9ad08ed533db997668ba2406a4fec0100a249daee57410f74eeecf29bd5fc870c007a5cf2e59f01996d0fef41c
-
SSDEEP
6144:YPboq9BJHmw+7hGdAbOppBwkDYESenLTf96I:YhBHmX+vlMenLr/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1ff1b44f4286bcdc2625e7c81c089b8_JaffaCakes118
Files
-
b1ff1b44f4286bcdc2625e7c81c089b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE