Behavioral task
behavioral1
Sample
b4fbffde1bd9b41dbae620cb3dd3c6db_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b4fbffde1bd9b41dbae620cb3dd3c6db_JaffaCakes118
-
Size
312KB
-
MD5
b4fbffde1bd9b41dbae620cb3dd3c6db
-
SHA1
0e6ff51607884202999fb533ef02e274d1990ce0
-
SHA256
fa81c830e14a62fc78b53331aaa454a7bcbee4d269440833d8fa5ce640e34331
-
SHA512
3ea58c3bba96752a8eff4452c331c113d219f02021b97d443e10c96173e6a33414e0aec6baae51b24d1d9c212b0441b9d95015a3263ba962a7fcc5b8c2e9a9b6
-
SSDEEP
6144:BDzyaqNqoJCyrsWNQb2L0tnZrfopr+nV2r10xpZ5X/7btlThoSehpHtDI4sCqpv1:yCIswQKL0lZznV2r10xTh7LVoSejNDsZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4fbffde1bd9b41dbae620cb3dd3c6db_JaffaCakes118
Files
-
b4fbffde1bd9b41dbae620cb3dd3c6db_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE