Behavioral task
behavioral1
Sample
b3aa3fcc006b687623cd724e83f8320d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b3aa3fcc006b687623cd724e83f8320d_JaffaCakes118
-
Size
266KB
-
MD5
b3aa3fcc006b687623cd724e83f8320d
-
SHA1
fe865cfa5f366d8526384314e54fd3ac974bd10b
-
SHA256
140d443350969e7eb74750dbd425177c4aa191c65d56684238a2ca13f730c21b
-
SHA512
7bc9bc618ea7f190af527d667d319e7502be0bb805c4d582fd6642d1631ecaf2bd73bd04766e0071c3e83ed297649a375549085f0daa0a03ba155fd727537c75
-
SSDEEP
6144:hQ2F+aKovRCLsCUYDI8PKKuYEWusK+o3E5Qq40Q:62F+afR3CPI8PE5d+RZ41
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3aa3fcc006b687623cd724e83f8320d_JaffaCakes118
Files
-
b3aa3fcc006b687623cd724e83f8320d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE