Behavioral task
behavioral1
Sample
b7bbf610fd0c84ab5a9c19a73f0bdc81_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b7bbf610fd0c84ab5a9c19a73f0bdc81_JaffaCakes118
-
Size
281KB
-
MD5
b7bbf610fd0c84ab5a9c19a73f0bdc81
-
SHA1
84d7be0ceed9fabe6535ec0595637779cb6e9f10
-
SHA256
f8a792e5303a803071aac9a1b399bb56b25266787ecf282d82dcbfe749048c19
-
SHA512
e8606d52cbfeb5fe6514591e70275607253530d2be63e0379b775615fdfc23daabd6d86d1693c1dc0309a0e5059cc850e3b2f5ea240af8ee10b84741c3772633
-
SSDEEP
3072:H0lvM9wyrPPNJpf/Zy50Vgqq4+tiam3N/C8hmxOUUr9dTrNbnhh/:H0lerPFJp3G0Vpr+tiaOjh4arDrRD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7bbf610fd0c84ab5a9c19a73f0bdc81_JaffaCakes118
Files
-
b7bbf610fd0c84ab5a9c19a73f0bdc81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE