Behavioral task
behavioral1
Sample
b434091f03800b7d234dc3c331c4ac2e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b434091f03800b7d234dc3c331c4ac2e_JaffaCakes118
-
Size
331KB
-
MD5
b434091f03800b7d234dc3c331c4ac2e
-
SHA1
0e76aea2436efbc570bc7e4046fe3f6250c7b21b
-
SHA256
3cd3bc005d6e46ae496d298b306f85938ec211869035a35a60d5494f92ecbc69
-
SHA512
2b0fd6fde6b0de1042775e87602d3ec6b7eae69d32d3d8e9ddab717e2190706c23a8c249f07525865e2897110b7acf53deb3a267e040039d53e031b359d8c6f6
-
SSDEEP
6144:q4uQTFFYtJ0hDYRLqLxNWyv7PuTv/aFfLtFu+hyufaLzaWsnu4:qhYFY0iR2NrjPu7KfLru+4ufaLz/s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b434091f03800b7d234dc3c331c4ac2e_JaffaCakes118
Files
-
b434091f03800b7d234dc3c331c4ac2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 888KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE