Behavioral task
behavioral1
Sample
b5a20ca3487b24843cd9c05272dfa492_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b5a20ca3487b24843cd9c05272dfa492_JaffaCakes118
-
Size
257KB
-
MD5
b5a20ca3487b24843cd9c05272dfa492
-
SHA1
76b05a0b6b939365a9a6fde49cca19927c950656
-
SHA256
b29ddf7e14895e7bcafbbd161dd2644c7a61aa16463ff4766444d2a91fdf37c0
-
SHA512
f52199e9b3c1268a9ecdc80c461cb3de6b3e9731624baefa0a0446ca81f9cbb6549f7b773f45b9e63587af0a74fc9d2454801b13d81e4495f5a00558ddd3f729
-
SSDEEP
6144:z9RP5JV+0IpyrBucMDkeBbqS8neW9ywTArN1qxiylaGDQR:z/P5+pyIcnlSSoG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5a20ca3487b24843cd9c05272dfa492_JaffaCakes118
Files
-
b5a20ca3487b24843cd9c05272dfa492_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE