Behavioral task
behavioral1
Sample
b461abd541ef7cd9d20fc37b65e0e3ac_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b461abd541ef7cd9d20fc37b65e0e3ac_JaffaCakes118
-
Size
479KB
-
MD5
b461abd541ef7cd9d20fc37b65e0e3ac
-
SHA1
852d3e4daf06f1ea8f3904d12014c3ae74580544
-
SHA256
9a4137e31316ec1cd4ce23a575874e947f6dd909ad2db57493a35c6b62c19fce
-
SHA512
27b5b47cb480d103fa9b225e34f3b4a26ee695e8d169327b91e0d45e90ce81bcbcdab612e8f0c7c6c941cd0c511f1d28ff65c75a6539ee781e2197a7b85d9ecc
-
SSDEEP
6144:/R+Lq98C2kzUsh6RKLLVy7+06e8q0OstG0xo66+dRv+RWq5xm9VeifS9LnFn14Zi:/6E8C2ktVLLUae70n1qYRWRrHFia1FWI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b461abd541ef7cd9d20fc37b65e0e3ac_JaffaCakes118
Files
-
b461abd541ef7cd9d20fc37b65e0e3ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 452KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE