Behavioral task
behavioral1
Sample
b50938e2be31d0df82e1fb85fb2047ac_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b50938e2be31d0df82e1fb85fb2047ac_JaffaCakes118
-
Size
114KB
-
MD5
b50938e2be31d0df82e1fb85fb2047ac
-
SHA1
e17697eb2cc2f1a3608ebae4a0b5a5e429df5433
-
SHA256
8d88bd8ffe68c8d91e4dad9f4809ff9025c602b7a90449144a0c90e4a5e6616c
-
SHA512
68332ae4d1f17366a5f33bfa3f5ad9ce5999d3273415992af9994f802ab37de2cf1078e47b8b238b3be6bc57b3c70685525ab1c9ee72a987436a801cd02f96da
-
SSDEEP
3072:/me1rnkQGq/zSLNzoZBF6jIgofN0m7c73T:/me1rZ/OLdoEow
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b50938e2be31d0df82e1fb85fb2047ac_JaffaCakes118
Files
-
b50938e2be31d0df82e1fb85fb2047ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE