Behavioral task
behavioral1
Sample
b294863d1758458a1532f6650ba942a0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b294863d1758458a1532f6650ba942a0_JaffaCakes118
-
Size
120KB
-
MD5
b294863d1758458a1532f6650ba942a0
-
SHA1
b092b19e78506e1721f228f7616f113e387e0c3e
-
SHA256
07fbc64e1a03cb41307036693a9f107eab50e7ece5702097d1c6c11c9ca877dd
-
SHA512
7a1efcf0386c3a1d6d1997964414c08cd92f64750887e8a64a44415d00bf5ccdafad2c345fb764f0d11189ad71651f79c8cf82ba954e06ae7f15313b21e5a4f9
-
SSDEEP
1536:Fsqss/kkOCuum9hjDOwFvHKlYJ3TA0sa3y19NtE2ZlpJKBCwhT:FPaNCuNhjDOoylY1cJa3E82ZRKn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b294863d1758458a1532f6650ba942a0_JaffaCakes118
Files
-
b294863d1758458a1532f6650ba942a0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE