Behavioral task
behavioral1
Sample
b894e07de4ee905b96be48f17567c8cd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b894e07de4ee905b96be48f17567c8cd_JaffaCakes118
-
Size
414KB
-
MD5
b894e07de4ee905b96be48f17567c8cd
-
SHA1
4dbc5c4f78b2b20cff2075b22d92ab3b1d147717
-
SHA256
3976554826af89260fa543d48dfdee0dc4b1b0c28ae106a23d2a83943c90a8fc
-
SHA512
e162273d9d9609e10eba110e27dd738f024408e129e723aa72bcd91504ad75affa0ac20434a3136f92fcbcec69a7e933fc58959902d9a3c5b2a048f361bbf5d8
-
SSDEEP
3072:7mWlFN336MdMfLirx4oA3mwBy45mjcn336MLWfLisP61bAXTQ:79qqULirx4oAieyUq0qLismbAk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b894e07de4ee905b96be48f17567c8cd_JaffaCakes118
Files
-
b894e07de4ee905b96be48f17567c8cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE