Behavioral task
behavioral1
Sample
b76c6beeab0b3cf3a3aba97161b94633_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b76c6beeab0b3cf3a3aba97161b94633_JaffaCakes118
-
Size
114KB
-
MD5
b76c6beeab0b3cf3a3aba97161b94633
-
SHA1
14230c8dd7379313c98037122c1b86265a6e3d4d
-
SHA256
663c242b44a4fee8604dd65534b0c6aff6865ccd4f080d96e364bb3557bedffe
-
SHA512
747d0c032a1178814d7041ece441c47471d811891c9188821bcf431d9e5a9dff2087bb63a6185d92f85c54f105535cd41172fe45ea05a64a4a5862f449c0a95b
-
SSDEEP
3072:fY8g50WIw9zGhSU5OoHZrywUu8bL6pZGQ:fxgmnwEhSUYoHZmwlpZp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b76c6beeab0b3cf3a3aba97161b94633_JaffaCakes118
Files
-
b76c6beeab0b3cf3a3aba97161b94633_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abc Size: 645B - Virtual size: 645B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ