Behavioral task
behavioral1
Sample
bb97ade9f8dac90e13dca0ce54adb108_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bb97ade9f8dac90e13dca0ce54adb108_JaffaCakes118
-
Size
221KB
-
MD5
bb97ade9f8dac90e13dca0ce54adb108
-
SHA1
a4c32922648d12a81d126d0acecc7ff2b45aa466
-
SHA256
e89827c1edb0b3fcdbfb83a3db503501e115014815e865f894cdc5aa417ac4b8
-
SHA512
b514a47cefd3ff8e85ac41cfb66529f33b7e2a390d9572534df443e86f0b1bb5b04a2b108233f15b216e1adeca2e83cf10933fef2a037eeae83d6c95d6da3411
-
SSDEEP
3072:oZWbB6zSJLYnpv+pqA/63BgCrHmBQM1K7PBF1DFtDIIixoutp/PgW:osbBMSJLot+pGXHwQM1KT/tMloSp/P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb97ade9f8dac90e13dca0ce54adb108_JaffaCakes118
Files
-
bb97ade9f8dac90e13dca0ce54adb108_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE