Behavioral task
behavioral1
Sample
b43e3bac509261308a3c3e7dc08bc6b1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b43e3bac509261308a3c3e7dc08bc6b1_JaffaCakes118
-
Size
242KB
-
MD5
b43e3bac509261308a3c3e7dc08bc6b1
-
SHA1
04d3b57fd43bc77e7848bbcde63e6ca0f7ef6f0e
-
SHA256
aa3d945a2ef5d87861a230988013ef532a8f56c7bac9f12a727a6df2c5bd7a54
-
SHA512
a74b76a99f44a4d116c38d51f3794e0a5211440a681e6f0d71c7c8b03d7b298fa06bd0e1677d881f4898be182d69cc1d14e868271ba36a2535f1bb8e2cb4ced2
-
SSDEEP
6144:WxWT/g+q27Jn9rRuEtvivUiJaoLKhHuH:E2VFRhwvU0aoLKs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b43e3bac509261308a3c3e7dc08bc6b1_JaffaCakes118
Files
-
b43e3bac509261308a3c3e7dc08bc6b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE