Behavioral task
behavioral1
Sample
bc5a0593fdece03b20f8fab802201da3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bc5a0593fdece03b20f8fab802201da3_JaffaCakes118
-
Size
156KB
-
MD5
bc5a0593fdece03b20f8fab802201da3
-
SHA1
d396b2cb02ec64c8f74bb2e2ada406abfa68d28f
-
SHA256
ad711d2ecc4a33236b810ef715bbe6547216b2ed56230862138402712d1ee248
-
SHA512
ab8b9c96a299e4cf0ea591d5bb7ab08fdb120da0cbd7499048c7bd02bf8b1372f48ae566045dd89ab27e5b2d1b176ee07febf82ba474d3d21922cca0f1fd3c8d
-
SSDEEP
1536:wDxb6smVIEBpq/IZiBzxYEcAviZjcVdl/xAv+6YiPzUlPK+qerzJ:YmVIUo/mi8EcczzrAv9UtKnex
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc5a0593fdece03b20f8fab802201da3_JaffaCakes118
Files
-
bc5a0593fdece03b20f8fab802201da3_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE