Behavioral task
behavioral1
Sample
bb68972abf872d40bcd142565a43f9c5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bb68972abf872d40bcd142565a43f9c5_JaffaCakes118
-
Size
61KB
-
MD5
bb68972abf872d40bcd142565a43f9c5
-
SHA1
6668033b48bfc78f5accfcf20aa2070e6677c0f7
-
SHA256
fea75b2a216fb7ecc528d4e6e3ab92e26f1fd15f6010fbe40776b30b414be1fd
-
SHA512
4ab7365dc0cfaf12ebf2c04642610e456c973305d96bef3b2f5e88b128c25b467cc249da66c7a3247abb48cedf882f91aaebfde71090bd221db9721c0c5a93ee
-
SSDEEP
384:SA/ZsjzGmwc3Ny32ILyGn0LfKSbwLrWLO3ojks:SaZ8vvgLLyG0DArWLms
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb68972abf872d40bcd142565a43f9c5_JaffaCakes118
Files
-
bb68972abf872d40bcd142565a43f9c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
RYeB Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RYeB Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE