Behavioral task
behavioral1
Sample
b4f7b3a0dec9a7d0d07676c7bd4d597a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b4f7b3a0dec9a7d0d07676c7bd4d597a_JaffaCakes118
-
Size
485KB
-
MD5
b4f7b3a0dec9a7d0d07676c7bd4d597a
-
SHA1
7cc7c30276cd29741d73d1994304f2588bcecffa
-
SHA256
12c9e0f6033563937c8f647c0299c496ac0b2f078bdb4ccba6e22adeba5581e7
-
SHA512
1c464712bebec9672964585d9a13f0f151f987f3a961beb54d2f6f263e6e3fb111fda334f5804ff7b4d206491c5875dfe7da0ddbfbca36852c3e6fb45f2e09ee
-
SSDEEP
3072:Gn9eqBR47Z6GzpLWRXrJIuCReS9PTTEcFA0/x1QQpecKM+T1yaML8UdS3hS7W2lu:wHgpecKM6OrW2lI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4f7b3a0dec9a7d0d07676c7bd4d597a_JaffaCakes118
Files
-
b4f7b3a0dec9a7d0d07676c7bd4d597a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE