Behavioral task
behavioral1
Sample
b482aebc32d7ac3d62773a7f14e32286_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b482aebc32d7ac3d62773a7f14e32286_JaffaCakes118
-
Size
501KB
-
MD5
b482aebc32d7ac3d62773a7f14e32286
-
SHA1
842c05caa45828adbd141d6663a0f600b100fb4b
-
SHA256
b0af22424c8230875bc272873cc24a1c02b86478b86bdc7e0e90da7ebb98e291
-
SHA512
2f43d4f9fc12288dddb9127b196cf2c989e420be7ba7b9ea9b7badd2be6c140d71b4fc546978bbb14572f57cad15929154a30ae0fb4e7275a9dca4a09edac90f
-
SSDEEP
6144:q8lLSeKLxjiZjdhTv2tIyzJM/FAvzBF/nM+BNlocz4xWadXmRd7gJQa3:qmFT1yNM/Wvz/Z4WaSdUJP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b482aebc32d7ac3d62773a7f14e32286_JaffaCakes118
Files
-
b482aebc32d7ac3d62773a7f14e32286_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE