Behavioral task
behavioral1
Sample
bbe08f37f6d7e267841e2098783fb8a0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bbe08f37f6d7e267841e2098783fb8a0_JaffaCakes118
-
Size
784KB
-
MD5
bbe08f37f6d7e267841e2098783fb8a0
-
SHA1
315fa346261e29e31586097783a22c037ff636d2
-
SHA256
e185d8b97846f08223d7bd105c83feda125ebfd7bed11a6c270ab7a6d734d5b2
-
SHA512
a3d94dbde92407d94a729207d4ad5c0036b8e19f86f18c090a8a0fbed1fbcfdcb26027f28bdd6901dc05c284d769c3c062e00cd465cc627ef95cfcdd859c460d
-
SSDEEP
12288:h01tg3h+UqJV8GTvNcLVtD0eJ+IjlGXE50c7o4QVMBOOCv5wRbXwhbS1hq6:h0rgx+UAV8BLfDJJtswoJVASUbge
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe08f37f6d7e267841e2098783fb8a0_JaffaCakes118
Files
-
bbe08f37f6d7e267841e2098783fb8a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE