Behavioral task
behavioral1
Sample
b47923157999988c89c5c67859ef0eaa_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b47923157999988c89c5c67859ef0eaa_JaffaCakes118
-
Size
2.2MB
-
MD5
b47923157999988c89c5c67859ef0eaa
-
SHA1
13ac9fc07098c34bc8eb31ec299403589ee08f6e
-
SHA256
187c609dbee011ae29af44a7115c9dc9c994e60608b3500a5d4673edd1b0cb81
-
SHA512
62b4daa0f4f9c57ae1e64b8ab3c0d14c8ed89c5b837f9af9b4885913fe4a65b9ecb7bebeaef39e3374884b6c5d8c0a35863226d28c566672234eb0461c284646
-
SSDEEP
49152:/OKa7rJr/S8yPMG5Qu7jiS9+Ffufh+DpL+w0PkWmo:/mYDrxnV9Qfufhs+tMWmo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b47923157999988c89c5c67859ef0eaa_JaffaCakes118
Files
-
b47923157999988c89c5c67859ef0eaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 764KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE