Behavioral task
behavioral1
Sample
b5ca6f306bb3bf942bbacfe21112f1f4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b5ca6f306bb3bf942bbacfe21112f1f4_JaffaCakes118
-
Size
268KB
-
MD5
b5ca6f306bb3bf942bbacfe21112f1f4
-
SHA1
a1de04c1dbf5d86709f46e1e3850abaa1b5044c1
-
SHA256
8c5a13534d0c5531f338d16b0b44861e2e6e3ee9890c0ea5eb06bcf7f2c789c8
-
SHA512
0588f31ca3f594498b5abf57b3ffe0a74880f5db5d6e0f4842d814c3a141898225944dada94d57365b869aec1fc88bb7b89cb8a7e8c0e642a4b63a26b42c04df
-
SSDEEP
6144:SqIFm1CGS88jD/gOWr5hET5U+5Q9xYQPlLFJoSO:boD/g/rIDsxbLLoSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ca6f306bb3bf942bbacfe21112f1f4_JaffaCakes118
Files
-
b5ca6f306bb3bf942bbacfe21112f1f4_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE