Behavioral task
behavioral1
Sample
b65a9ec77fba45d868d059b3e9b2c17e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b65a9ec77fba45d868d059b3e9b2c17e_JaffaCakes118
-
Size
64KB
-
MD5
b65a9ec77fba45d868d059b3e9b2c17e
-
SHA1
fe5f8a37837023cdf8980ed2ff5ded3e920d2d47
-
SHA256
cc448bafa3c845610a8ef4195fe44dd07f17458e21c5be36ea154a321e70e1fa
-
SHA512
73170d53922f6ffaa77d87134c99dba37c016edd568874d3377c49c129dd7e0c0dcab347597a549334c76fb9f8c638689e3723e475715572c7c7cc62e8f7fec5
-
SSDEEP
1536:VQknHbJqWFyFyx36schLwEAx3cAwx1HYW8UlcV+ByWPc2nhdh:JnHbJqnQ36sGLwdxsrxdY86V+ByAhd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b65a9ec77fba45d868d059b3e9b2c17e_JaffaCakes118
Files
-
b65a9ec77fba45d868d059b3e9b2c17e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE