Behavioral task
behavioral1
Sample
b517999892fe6e5834279ab6f4cb0dea_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b517999892fe6e5834279ab6f4cb0dea_JaffaCakes118
-
Size
56KB
-
MD5
b517999892fe6e5834279ab6f4cb0dea
-
SHA1
df062648eaf0910290a74d007e2fd2dfb273fc54
-
SHA256
58356102f90ceb8312361798f138b6b7f8ca7af28438c3229105b09808ffbe42
-
SHA512
1225ab7499d3ce65db0c44e455761f5748e8d7bb28f6a196a95f3077027a701fc7b650f6e917092791eb517685f56b3f54ea35fca688ef01fb62bd7df32b0307
-
SSDEEP
768:T+UAXc7gx1zWnML1REA56lfRC7x2NUWayaGWUVdo0hssKaTMXyqYkXJnO4WY+bPm:6K0anMLQAMex8a1fsKaTKNO4WY+bTcn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b517999892fe6e5834279ab6f4cb0dea_JaffaCakes118
Files
-
b517999892fe6e5834279ab6f4cb0dea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE