Behavioral task
behavioral1
Sample
b9cf011968971cdd8424bc463603b71d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b9cf011968971cdd8424bc463603b71d_JaffaCakes118
-
Size
33KB
-
MD5
b9cf011968971cdd8424bc463603b71d
-
SHA1
956005707789e968200da487b7397a8eafb99cff
-
SHA256
bf27ec4116963849dfbbcd42faf7e985ce40e3d475ace26876fde13640e30448
-
SHA512
b47af6a31200e975f8346e8212774615ed46ca060ab1429ea2a8644690aedc35e2a7b5266d7d9a79cf386cd36d9a04cd2edddf3bf0aa6cf3519242b34968d052
-
SSDEEP
768:jWkmS7X/3zP3oZj818AskArJqA+9P59fNml1FpgP:lmSA21MkuJn0nNmjFpgP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9cf011968971cdd8424bc463603b71d_JaffaCakes118
Files
-
b9cf011968971cdd8424bc463603b71d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE