Behavioral task
behavioral1
Sample
bd6c86a263db63033d9753f5d3687338_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bd6c86a263db63033d9753f5d3687338_JaffaCakes118
-
Size
784KB
-
MD5
bd6c86a263db63033d9753f5d3687338
-
SHA1
55a6e076ed4fd3530ce3ca2da552588ffc5206d0
-
SHA256
a30add454c8da2f449716b138c02328f25e40642c6339672d0b780bdd0ae32b4
-
SHA512
90aa5cbe5fee248428d306805cbced8112754855e1d37f476cb484156bc20a427056e30fc0256ee3562508a8e8bb979144555496450e8af812599709420df8ac
-
SSDEEP
24576:uq87hPkqRkm6iJMxRfoUpF6LWVzWGqebooE:a2zVViJeP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd6c86a263db63033d9753f5d3687338_JaffaCakes118
Files
-
bd6c86a263db63033d9753f5d3687338_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE