Behavioral task
behavioral1
Sample
ba4548a4ac361edf85074b45c3426472_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ba4548a4ac361edf85074b45c3426472_JaffaCakes118
-
Size
36KB
-
MD5
ba4548a4ac361edf85074b45c3426472
-
SHA1
6bcdbc26505b509d48f28103cdb322865093b16c
-
SHA256
109d20c98de3309f3c5e0e2f214f1e8de8e1cf4996d40f82a14fcd96f17b3607
-
SHA512
9c8a7b38ef94643d9259156c5744e2e0acc995d5a897a58ac83114422bc2a119ecdff2f8ec7117d620ab28a85c8d312e9fb623884f7f0a952250e08f1774e510
-
SSDEEP
768:hkvDAmyMMJ9yIuQ5hsY6g8Uavwp23ogZMs4mCY:sAmpe5yY6g8ZL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4548a4ac361edf85074b45c3426472_JaffaCakes118
Files
-
ba4548a4ac361edf85074b45c3426472_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE