Behavioral task
behavioral1
Sample
bd7cf718c7b544cfc1b24a828f1150f2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bd7cf718c7b544cfc1b24a828f1150f2_JaffaCakes118
-
Size
784KB
-
MD5
bd7cf718c7b544cfc1b24a828f1150f2
-
SHA1
a5b5de751ff41bd2daa114b9a7a591aa3dc464d7
-
SHA256
327b2c373f3acfdef1f43ed5fc234da145519bf72f145dbb4a058798f546addc
-
SHA512
878ff5632e81aa89ce846d401b313cff5181fbc1bbdd75fff2b9f56efd31bcb9fb39720a9ac2b4f61c33106e93d59621641a218ad238ed3b92a17a23dbb9904d
-
SSDEEP
24576:YALG3y5P9vdw56zz/Dx8fGVXLvvApMpiHLc+:YoG3yrvdI6Vmaj4q0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd7cf718c7b544cfc1b24a828f1150f2_JaffaCakes118
Files
-
bd7cf718c7b544cfc1b24a828f1150f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE