Behavioral task
behavioral1
Sample
b49c208497d6e6464d61e5ed66ce2d81_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b49c208497d6e6464d61e5ed66ce2d81_JaffaCakes118
-
Size
217KB
-
MD5
b49c208497d6e6464d61e5ed66ce2d81
-
SHA1
18bb2e3d52eec0ea9d3ca2fa3b550d51b997711b
-
SHA256
1ce7f0946b6e7847aca3f69695321a86fbb8509eb470f90979db00e774b80f2f
-
SHA512
01cae85c150b907422596b168c2d4e87b11697f5ddfb6c6a4b6f6d78c41ba36eb521cf62ef871ce3983584deaa959853e6dc8cfeb8b7f7232dece5e1cd0ee063
-
SSDEEP
3072:obRbPzXgJb8EcRoPJINzE5DVHaKvX3rrfiii1GIgpuxuXFWYHkYkQcMAwBXV6DN2:obFQ8EfOaDVHNvfkGBBX/HEQT3BMNe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b49c208497d6e6464d61e5ed66ce2d81_JaffaCakes118
Files
-
b49c208497d6e6464d61e5ed66ce2d81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ