Behavioral task
behavioral1
Sample
ba81f0e2077e2af0037190ec8a617852_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ba81f0e2077e2af0037190ec8a617852_JaffaCakes118
-
Size
46KB
-
MD5
ba81f0e2077e2af0037190ec8a617852
-
SHA1
1c8166878b17715b03d07e6a29ef611b3d8edeab
-
SHA256
49bf06a7a6e960cea4754f587a8ca086b2192329606094ab3475954bc976e848
-
SHA512
f731f9c7550a3532b9aab876a69dbc6426181e54f26da7e396e469202f8c86246604cd142cd3df3bc738ec00c31f4e61b06a46f567a5b187c46346ff51559ece
-
SSDEEP
192:UnkFfRTlrm9pp9ppbWXHsTvc13Z6h0sWdqgX73oEeb4aCmwOrFTIgEWj2nulfBnr:UkFfRTpm9PBmQg6SnLX1rWaMflfzcDE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba81f0e2077e2af0037190ec8a617852_JaffaCakes118
Files
-
ba81f0e2077e2af0037190ec8a617852_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE