Behavioral task
behavioral1
Sample
b48dfd0dfcd2af6110af3f195ca78026_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b48dfd0dfcd2af6110af3f195ca78026_JaffaCakes118
-
Size
63KB
-
MD5
b48dfd0dfcd2af6110af3f195ca78026
-
SHA1
eb884c72901b13b92ba4070ef81dd6daa43b25b7
-
SHA256
a9b88c084235bc7dcaf0d08d2a1d2c8c78439895bf2849b5a5802b47074ee156
-
SHA512
8605311511ef98f401ca78b6630208fdb94a2ef40dbc4387a717368832e13a34178226f8d79af94fd3ccf6229811ad507eb6dea4a9332bf482def579034b84c8
-
SSDEEP
768:YD/ddg1noJzyYRvoLdUAxUBRENKa8TqGTQADXNIX46HwM2zib8u7:KgCUYRsUASEN78TqGMkSI6HwgJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b48dfd0dfcd2af6110af3f195ca78026_JaffaCakes118
Files
-
b48dfd0dfcd2af6110af3f195ca78026_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE