Behavioral task
behavioral1
Sample
bb54645565cc7785b65f68b4b704226a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bb54645565cc7785b65f68b4b704226a_JaffaCakes118
-
Size
359KB
-
MD5
bb54645565cc7785b65f68b4b704226a
-
SHA1
f396edcf867d71c29417744edb6d34f429bb9b79
-
SHA256
38269800f6d37d9dfbb779f66d3b92d1b5e515d4281d54b4eae114679e908d97
-
SHA512
a333b08ce5e0eb457f7d2b06cbfac9940ba99b16cf9ec6ac6d8a32969e1780cd8c9931b7d1544cd9d347e9789346f8ca84df8333cbe5e149cb76506bc3465e30
-
SSDEEP
6144:ZgRyiIWQFpUv4/B+FrM144XlzKlUAzYYbuewX79GtPuB8PxwPh79i5s/CoS9iP6e:3iMCv45+uK4VKXknewr9GBY85wPTi5s7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb54645565cc7785b65f68b4b704226a_JaffaCakes118
Files
-
bb54645565cc7785b65f68b4b704226a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE