Behavioral task
behavioral1
Sample
b7c36584c0d46bc31c25d5aa7535ef71_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b7c36584c0d46bc31c25d5aa7535ef71_JaffaCakes118
-
Size
120KB
-
MD5
b7c36584c0d46bc31c25d5aa7535ef71
-
SHA1
881cd83fa03dbadc196c3d35c8b3b93d551458c4
-
SHA256
44e2e411df2f78688c1c63a13dae20beb28ba18476323ad17d2d473e4225b5e3
-
SHA512
8f509e4f711ed064c352ac5341b330deb83804c8375790e3914d3bbfc1e6959b296d96ee4dcf9583f2edf0c87dfd0f935fbb4f08e7a97a3d7c20320ef6a3d9cb
-
SSDEEP
3072:mkD9YQmSZ3k84l/5UGv7aXj1woCO827xLW:mkDzmSZXW/j7aXj1wBp27x6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7c36584c0d46bc31c25d5aa7535ef71_JaffaCakes118
Files
-
b7c36584c0d46bc31c25d5aa7535ef71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ