Behavioral task
behavioral1
Sample
b86eaa74fa3667e9e40ea34acb27d307_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b86eaa74fa3667e9e40ea34acb27d307_JaffaCakes118
-
Size
133KB
-
MD5
b86eaa74fa3667e9e40ea34acb27d307
-
SHA1
d6a5a98529d146f387bfcfcc8ea4c53452ba4e40
-
SHA256
e509b609caf63229fa40361c0f12835a8fa968f5054bf794beec61ad65d6dd09
-
SHA512
c68dd4e392e4095d83ed7d018ea5526ff60ab069562724f89f00dfd1df657c3149fcd3a53d8ce67b19a14eb48898fd11cbf6f68168e87888aa40df2983ee0106
-
SSDEEP
3072:oIV1BA1dYOAPItrPOc/YNQmkJTmrxHmL1u/RQ:oIVHvtcgNpk16GBIRQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86eaa74fa3667e9e40ea34acb27d307_JaffaCakes118
Files
-
b86eaa74fa3667e9e40ea34acb27d307_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE