Behavioral task
behavioral1
Sample
b3656764149053497c77d5e42e5f83fb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b3656764149053497c77d5e42e5f83fb_JaffaCakes118
-
Size
124KB
-
MD5
b3656764149053497c77d5e42e5f83fb
-
SHA1
819efdb4565791bfc30c005594fa8a31e39184a0
-
SHA256
fa7457e2a6e482e7f476dcce1160be48f39033b5a8e1d3697bd1ac8db51ce905
-
SHA512
1c22843c8eeb6a17cf6d93f622379626b759d9dd214f7ae20603a06e3c02bf6b2620bbadee8c279fc279b1d946e20004aec7d32ba19abf2ba7c9aa4528c71751
-
SSDEEP
3072:dky+rk7n+UnMgmhkS7DsI8mjT6XbBnkW3kLsj8AE29ZqfG46outC:dSk7nNnMrhkut7W1B3D8l2OO46oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3656764149053497c77d5e42e5f83fb_JaffaCakes118
Files
-
b3656764149053497c77d5e42e5f83fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE