Behavioral task
behavioral1
Sample
bc304ebc814bae122d8f45488b39de7b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bc304ebc814bae122d8f45488b39de7b_JaffaCakes118
-
Size
125KB
-
MD5
bc304ebc814bae122d8f45488b39de7b
-
SHA1
6623613c8b36d589e92b27c88824ce4ad0898e1e
-
SHA256
8d5d1a7ec4668fb7dae3bd41342b9a6cd5049c0739290cd4bb69aa44e14ec1b8
-
SHA512
f0b5f395755e22a56709fe4dc2cba4d44152a81500902880efe05edd5e78b5a3c19e3d0dffc014d157ee2e0d487d4c6d5c2886492e2c4f9b68ca4aff5af6676d
-
SSDEEP
1536:IOC0FvV4OguHxjhpA4Bm7uW0vSUsghQev+3PTTKuFqKRr0aF5frleGhd9TfBi1p0:IwV4OgSzBmh04ekPTnRr0gwGj9Tf8p+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc304ebc814bae122d8f45488b39de7b_JaffaCakes118
Files
-
bc304ebc814bae122d8f45488b39de7b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE