Behavioral task
behavioral1
Sample
b884ea9a567df9e14ad3444e213d9fc5_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b884ea9a567df9e14ad3444e213d9fc5_JaffaCakes118
-
Size
784KB
-
MD5
b884ea9a567df9e14ad3444e213d9fc5
-
SHA1
d40c5cb424e5b08d809098c1db683d431418a4fb
-
SHA256
5f5e78e482efe14cc155f5848fbf2db0fb3a764ee165d7b234a160e71dde2e61
-
SHA512
222c61a260063a7ec71594c030ddf61ee45d27d0509535b3375779e3ee75ef440b31e03e91f458ab371a483396737099df0f98ff7f3125dabd3f19b1fa6ca349
-
SSDEEP
12288:N8cPMW548FVEVrMEfddfEmlFUru+sIBVOzBIaVmCTOWWo2ZIS76UwAEpRwN5m/s:Fl9TEV9fdKw6C+A1IaVmlWeWS7KANY/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b884ea9a567df9e14ad3444e213d9fc5_JaffaCakes118
Files
-
b884ea9a567df9e14ad3444e213d9fc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE