Behavioral task
behavioral1
Sample
b86db050d05f72a87e2a7e0401a9dd57_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b86db050d05f72a87e2a7e0401a9dd57_JaffaCakes118
-
Size
143KB
-
MD5
b86db050d05f72a87e2a7e0401a9dd57
-
SHA1
da66e6c4914d1c0b5e748c9627af2b5bd390ee86
-
SHA256
7093047e441bf5db09cf1317f2f5a53b0b664f89139ab22404691b07b66876f8
-
SHA512
ed9078f399b06a3bc7fdd627c403ee15bb9722ec6017160125dfd40d7431e58eaa6837f8bb1ecb03f28a6f8395bf7e8870235d4737ce6fce6ff214eba81043da
-
SSDEEP
1536:1rQbx8fDG/oIkfVXQVbYAqUPKQzw9vy8rjJdDAnTFmiVccGsJmhh4hhrhhhhhhhT:xQbx8fDG/oI2XAHw9vyAwT7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86db050d05f72a87e2a7e0401a9dd57_JaffaCakes118
Files
-
b86db050d05f72a87e2a7e0401a9dd57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edata Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mslrh Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE