Behavioral task
behavioral1
Sample
b9f043ccb3865e83fda40b77dace96c5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b9f043ccb3865e83fda40b77dace96c5_JaffaCakes118
-
Size
169KB
-
MD5
b9f043ccb3865e83fda40b77dace96c5
-
SHA1
499e471f62ea2ef607beed96213b050f42ea486b
-
SHA256
853bdbeaf2f5cc13675c1f8f4496d5760b18c6acdf46102f0e43c76094505a83
-
SHA512
d58dd684e0758a23b1469e96bd808ddc313c895cb05f093b40a6ac0310046a75a2332b2887e80067bb071cf38df71b2fa09196260a62fa5c62b28e3853bd7d81
-
SSDEEP
3072:SOHT2QwEeCufAF/QEZ8jeX+A5q6PqVCwUSsYFu8GWKU:bTuEeD4FYbK+Aq6yVCTpLeK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9f043ccb3865e83fda40b77dace96c5_JaffaCakes118
Files
-
b9f043ccb3865e83fda40b77dace96c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE