Behavioral task
behavioral1
Sample
b895dcccdfbf7968a888f1035a98c984_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b895dcccdfbf7968a888f1035a98c984_JaffaCakes118
-
Size
371KB
-
MD5
b895dcccdfbf7968a888f1035a98c984
-
SHA1
60f5345ce6d179db70d9babb2f0186a775affa27
-
SHA256
0144f28bf0e044062336f4aaa82780ba117433fe7334d41e39fca81fc9a2ffd2
-
SHA512
e1bd284d8c10742257eca26d121b78b42db88e7fd1caaa22b186859a92d3d8fccaab45f9e1622d964f99d1d1fbd2a6f803eb8b62fbd07518db43662b6af4b8eb
-
SSDEEP
6144:glmk0mBfvfRMAz9FcskLnW26wm3K4Eicm8MXmASgpW/NU2rVyNlfj7lg0X:s0mV3Rnz9ysORm3geBmWW/Rqlgo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b895dcccdfbf7968a888f1035a98c984_JaffaCakes118
Files
-
b895dcccdfbf7968a888f1035a98c984_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n-code Size: 103B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ