Behavioral task
behavioral1
Sample
b50f83def21311011b96aa1d3a3fc75b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b50f83def21311011b96aa1d3a3fc75b_JaffaCakes118
-
Size
151KB
-
MD5
b50f83def21311011b96aa1d3a3fc75b
-
SHA1
aaae0c5a8008be6979afb47265f7a4dbc8047cd5
-
SHA256
17e73925464bb1904630a511736fec11cfaf62dfe5cf6070f41b6b264bd97f2e
-
SHA512
beef96b7dd37488a946329dd9566c0a6f535d8dddd6b8bd52f3a2f0ffb3f982fb132cfef1cb5eb1fa020ddb4b08c3abb2697db18b8fb59e0c0a90278a9861174
-
SSDEEP
3072:F0zspFJ4uFjOaUFyvbkpVUD969/umuwO1CuswvjnSSp7On+2xJQf4oouh:FRfuSjeFQIUxMum2uunX7oBVooy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b50f83def21311011b96aa1d3a3fc75b_JaffaCakes118
Files
-
b50f83def21311011b96aa1d3a3fc75b_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE