Behavioral task
behavioral1
Sample
b40099bcb212de0565fc919d617b0cff_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b40099bcb212de0565fc919d617b0cff_JaffaCakes118
-
Size
105KB
-
MD5
b40099bcb212de0565fc919d617b0cff
-
SHA1
7de66c57b4f677e66469d1a48c405250ac2fa4a8
-
SHA256
68d9e6c3cca08aecca38cf36b5e1658ba7e80aa7f43a21364e9cb75268beb636
-
SHA512
c19058f62956ee7026944cd687cea459c77cbdc9697df70fb7f17b21d3794798775b74d6c207bd7693e885403e8fde042ffaba5b9bfd559447a02232d82535b0
-
SSDEEP
3072:KwV4OgSzBmh0ZNzVekpFkzfHCPtwGj9Tf8B5:KMzzI8jZFkzfHCPqGj9oT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b40099bcb212de0565fc919d617b0cff_JaffaCakes118
Files
-
b40099bcb212de0565fc919d617b0cff_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE