Behavioral task
behavioral1
Sample
bc22fe64f1c03e81208cea0402cccc96_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bc22fe64f1c03e81208cea0402cccc96_JaffaCakes118
-
Size
784KB
-
MD5
bc22fe64f1c03e81208cea0402cccc96
-
SHA1
dac4d708a1ed77455c5c4a8e1db2e92292329e79
-
SHA256
2868c0914c34d5a562ef9db79b110f147c63805af7831caafd1315b0b80a2780
-
SHA512
99eedd737f13e3dd81095bed727c9eaaa82d1114acbc4d2fe7733694459f11ed01d21cbba4a204a9528f884f7521bee982984d1f605c150012924e92320c94a2
-
SSDEEP
12288:/stZGqSAhJaC19TxW2rtBUdSjlGdeDEjYaozwKf7KkYqoEGgTpbxaIenL/R0RzlJ:0n1AETWSpGdtj6zJ6qBGQb4IkR0RxJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc22fe64f1c03e81208cea0402cccc96_JaffaCakes118
Files
-
bc22fe64f1c03e81208cea0402cccc96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE