Behavioral task
behavioral1
Sample
b4cf756f0d19fd2383e3d75fea84fc05_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b4cf756f0d19fd2383e3d75fea84fc05_JaffaCakes118
-
Size
817KB
-
MD5
b4cf756f0d19fd2383e3d75fea84fc05
-
SHA1
dd8111c373088ef94975152904535dea245338ad
-
SHA256
1b477e9361654d2e4f433f8d5303d0b0de1df973fe1ff12c215180c512c99a1a
-
SHA512
12a7607983a11d46813395a0c115d7626d4b4a6e604b1a7b044ce0b1be6f6ec3406b61b1a7dc64ef6338154d247ac47866a885822f8add617a80e0f9ebe58995
-
SSDEEP
12288:OVQd2KcrtikxNi9FL7Lz08OGzRtRFw43lGRmUcozXJbjw+0oh9CrzBokjBNRIKIm:0Dzzi9BPnq+GYUFdc+0ohWBNRIKISf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4cf756f0d19fd2383e3d75fea84fc05_JaffaCakes118
Files
-
b4cf756f0d19fd2383e3d75fea84fc05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE