Behavioral task
behavioral1
Sample
ba0b1d4c7536f39962498747b8f64c9d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ba0b1d4c7536f39962498747b8f64c9d_JaffaCakes118
-
Size
300KB
-
MD5
ba0b1d4c7536f39962498747b8f64c9d
-
SHA1
20d9c76462be1653672c16daeb9c91929aba597c
-
SHA256
7a73e125b9e1b0bbeecb1db1d7998095ddadc91927695c60ba01d5654120a159
-
SHA512
58bb76fdc81812b3f81e8f3c1edf5d43fafc518d4cab149fdb3b0ca6ff7208e9805b44c28022039720cb7d163683a742999a40af18148f5b22863f90b913c944
-
SSDEEP
6144:QMIs9fiTrCiwTMbuXAWqLih7zQGqf4holtvylxUv5WNP4Tp6oSj:QA9fiPuXYGhA6OJEPq6oSj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba0b1d4c7536f39962498747b8f64c9d_JaffaCakes118
Files
-
ba0b1d4c7536f39962498747b8f64c9d_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE