Behavioral task
behavioral1
Sample
b3568f7f3e38d29787f1ef923bd81da6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b3568f7f3e38d29787f1ef923bd81da6_JaffaCakes118
-
Size
4.6MB
-
MD5
b3568f7f3e38d29787f1ef923bd81da6
-
SHA1
d2989294d80e5f2ca10fb986a25885d9f6ec97b7
-
SHA256
deacfcd98c5f78499fc6bc730fa494c2d5a0092fbccb88a15f3f7c1d32605a48
-
SHA512
30c2a2e1b5cf7ecad6b4ab8359d77c4e800e23502d1b2d79cb41e6ab93009fc00edfc2b1011bbde7e82fc9ecb50352fc866c0f833a8d8000d9cd4c155b8d0c7b
-
SSDEEP
98304:qGHMzrVzQOBAcjJR8mWlJB4CPHZGRz8LftubQZ1xO/bzzPKCz:9MzpJBjj3oboRqlQIU/bKCz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3568f7f3e38d29787f1ef923bd81da6_JaffaCakes118
Files
-
b3568f7f3e38d29787f1ef923bd81da6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 659KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE