Behavioral task
behavioral1
Sample
badf457227730640c5914c749b358014_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
badf457227730640c5914c749b358014_JaffaCakes118
-
Size
319KB
-
MD5
badf457227730640c5914c749b358014
-
SHA1
160d64f71c3d0911f207702564a2e26efac5fc03
-
SHA256
06b6fe5761168f60085009a933c307d04c9d88aaa8c5297216bd486ed8dac1b5
-
SHA512
bd7efe613652eabf6f3084ccf3fa14d39ed5c9556975cb1aaf22d94457006b076a50bd6d2aa510231bf4703e7c1d1d35be4a1036aba1d7963e1b5744947f9c15
-
SSDEEP
6144:zwlXXuFfDNjOX8ay0tU1kiTrcA3TXwV3Dyk16FWo+v7j4HpA6ry:zwlX+lDNjOX8RmUhMiXwJlCD+v7jh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource badf457227730640c5914c749b358014_JaffaCakes118
Files
-
badf457227730640c5914c749b358014_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE