Behavioral task
behavioral1
Sample
bc0b7787f074ff05c879ec057751aab5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bc0b7787f074ff05c879ec057751aab5_JaffaCakes118
-
Size
4.7MB
-
MD5
bc0b7787f074ff05c879ec057751aab5
-
SHA1
cf1a2f3dddac82cd1c9c1b94f9f0ac23c31c261b
-
SHA256
a880590e7871f380435f42512108b60f90e99191ce965608bb64bcac311bd22f
-
SHA512
2b2b87d21217331d2f69671200a428244e2bc37edabb96505c997e49dfd007b7e7164f4e78b2a69fc10b14226018a132319eb025990b3440bbc37df1b626aae4
-
SSDEEP
98304:0FzLDAr04FAcEcYr4/6XX95Fr8vzDe0dPsh/Ng8tYpL4ytU47Nh0f:0stFLCqk95qvzDe0pw/NztYpu4T4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc0b7787f074ff05c879ec057751aab5_JaffaCakes118
Files
-
bc0b7787f074ff05c879ec057751aab5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE