Behavioral task
behavioral1
Sample
b62fda298364fe35abe10685737e2c5d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b62fda298364fe35abe10685737e2c5d_JaffaCakes118
-
Size
27KB
-
MD5
b62fda298364fe35abe10685737e2c5d
-
SHA1
8f507e85df24f97c6915dbadab0e56647c7fb9f8
-
SHA256
a6797b56f1d4907c8f8e439c43055a3bf2b4ac02413d1773237d56da3171326a
-
SHA512
150584555c72153629e7c48221c82d79ba5770f173935131a25ae328ba18005ad444a09c40364a3fb67ad6e6d3214c31b332607f7d3a9b9227b4d653fed05b2f
-
SSDEEP
192:EpoJGXTXDUNnkbW5iqbwwrRd2m9bv05DH1z5geEkQ1LBq7m5Q6eXxM:EnLDUNk6bv2m9L0pHXg2Pqe6eh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62fda298364fe35abe10685737e2c5d_JaffaCakes118
Files
-
b62fda298364fe35abe10685737e2c5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE