Behavioral task
behavioral1
Sample
b301411e79538b8091ae83723a638e9f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b301411e79538b8091ae83723a638e9f_JaffaCakes118
-
Size
465KB
-
MD5
b301411e79538b8091ae83723a638e9f
-
SHA1
ef3ca391f10a0e9cccff7f2bc773244ce55a730b
-
SHA256
4dc94663748c2a0a8f7a3743272c5504d3633859938e29eadb7f376645cc7670
-
SHA512
1684a1c99d7f5728428b07d48abc9ea36ca4486b81d22a9d415b0e2ab4088a4d644635711197f6a64fcbcba6df98d5d7531d8b8630933e354411ed102b2b3c28
-
SSDEEP
6144:B0AW3axC87Tign/9ZNFFNbnEJOavq5kvITNGfPHG6Vd02/YF/rtBsY7FqtSpuw:BvRrZ93lg0QvAqPBABrtBsYAU4w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b301411e79538b8091ae83723a638e9f_JaffaCakes118
Files
-
b301411e79538b8091ae83723a638e9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 457KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE