Behavioral task
behavioral1
Sample
b42f385c6528f7cf858da3ac98716ba1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b42f385c6528f7cf858da3ac98716ba1_JaffaCakes118
-
Size
16KB
-
MD5
b42f385c6528f7cf858da3ac98716ba1
-
SHA1
fd429ba7691e0c4b7f90901e409fbddf7b8112d1
-
SHA256
b6748785182e313807e40ed88b4c825faa0aace49baef71a55afda63eb545178
-
SHA512
9db7dcfc0c64eec47a56a49e2ed4ee21a7edd22f4f05aaaae50f54747e5654fa62fa8ee2350744a874a5d83268b341151194bbcbb76197a6010f43e276999d75
-
SSDEEP
384:KqL7gG77AxdQueyzNnX91MLwIdXGKiEWc7s9GvmL0L:K7GArQujNnX9+E8GK6cy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b42f385c6528f7cf858da3ac98716ba1_JaffaCakes118
Files
-
b42f385c6528f7cf858da3ac98716ba1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
UPX0 Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE