Behavioral task
behavioral1
Sample
b936507ea256617c176e2cde6563a837_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b936507ea256617c176e2cde6563a837_JaffaCakes118
-
Size
114KB
-
MD5
b936507ea256617c176e2cde6563a837
-
SHA1
5c16f93140cbb8634aa90049f2268ab53934bca1
-
SHA256
f994c9320cddf7d881d0ecd44989c7276d743ac457f1c40229b2cc3b50a7b2bc
-
SHA512
a817dd1b3d2c2a1ec5aa3c52f809bf0424e04484dbbeb5dc70ca7a4d0f47c643bc26667c82674bf675aad3b17c8d4bdfacfe55dd165def39a79d3d3ddb2ba5af
-
SSDEEP
1536:tLlgSiF4zMrfNVlvLwJiAyjM/+t27Btt4+:tpoq4rfNVpUwiNt4+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b936507ea256617c176e2cde6563a837_JaffaCakes118
Files
-
b936507ea256617c176e2cde6563a837_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE