Behavioral task
behavioral1
Sample
b59c3cc0ede6e856d7b9b148f80fdc5d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b59c3cc0ede6e856d7b9b148f80fdc5d_JaffaCakes118
-
Size
219KB
-
MD5
b59c3cc0ede6e856d7b9b148f80fdc5d
-
SHA1
2b8ab1882caae003c997005cdbabb02bd1e7b530
-
SHA256
41710532e392f01453592a5fa92c09b072751b4e247bf6920d0d0c80cfd5a507
-
SHA512
c534c8b4293853b6f377b35ca0c4ca82823b4dbb2ecf1866308e842978c0a5c414edf0fc27291e74ce6a4141061076f28c555e9f58fdba4b7947763b641d9023
-
SSDEEP
3072:vYUfLL6lDs8gE/PsoCOYjnt71e56GYvmRUjWi2CaVBfmc7i4KYtBuKO9TOQ:vzL+lDsG/UoWK56GBUF1UBXy9X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b59c3cc0ede6e856d7b9b148f80fdc5d_JaffaCakes118
Files
-
b59c3cc0ede6e856d7b9b148f80fdc5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE