Behavioral task
behavioral1
Sample
b28ae95d1bca5ed560169cf2f31568c7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b28ae95d1bca5ed560169cf2f31568c7_JaffaCakes118
-
Size
411KB
-
MD5
b28ae95d1bca5ed560169cf2f31568c7
-
SHA1
4f019ea4c979a81b84507d3a5fa9c276f2debbb2
-
SHA256
888420bbedfc70fdcdde67c8e9d1bf2b6cce82aa0245b526e3c2988da7a719c3
-
SHA512
6a994ab270b5d5da7c38b2ee8f4676505f40527d1842e2eab987747bac780366ee2d74894847106973a134567818ae71377b594285dcdaa5c1d778ec665172a4
-
SSDEEP
12288:6wy3CDUqK89DMZYAa3kMGwS9AUtniWU15x/:4qF9DMEh+i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b28ae95d1bca5ed560169cf2f31568c7_JaffaCakes118
Files
-
b28ae95d1bca5ed560169cf2f31568c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE