Behavioral task
behavioral1
Sample
b47e7d0d39fe300b7c0bbc990a0a04dc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b47e7d0d39fe300b7c0bbc990a0a04dc_JaffaCakes118
-
Size
110KB
-
MD5
b47e7d0d39fe300b7c0bbc990a0a04dc
-
SHA1
4e52aee78c176668980cfa91e08eeca439a7e7d5
-
SHA256
107d822f9289dd1a82b56cbd1dfe7e8f03fbc809b9da2040d97ab940135e66df
-
SHA512
37155dcaf9f10a2efb5494b67968dff72634b740847411408416d4ec9140bfab8422b30405e95a0ccd814baa0de0758d1e515e6078472d4b50fea84cfbfe157c
-
SSDEEP
1536:7thlGOzmooqjS+B0CdK1lU6S0xYyM/XVl8XBVu3rLpit1JPXAd+2Nn2/p+:5GOzZS+iCEvUCa/XD8XBk3X0tQd+q28
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b47e7d0d39fe300b7c0bbc990a0a04dc_JaffaCakes118
Files
-
b47e7d0d39fe300b7c0bbc990a0a04dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE