Behavioral task
behavioral1
Sample
bcda95a6af155181ad1fdecaabf04139_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bcda95a6af155181ad1fdecaabf04139_JaffaCakes118
-
Size
11KB
-
MD5
bcda95a6af155181ad1fdecaabf04139
-
SHA1
0eacfbe6dc2ab9a662a1d27bb4d3e633cb62d1e1
-
SHA256
89322527a5f8d650a6a380e9603706ddd0a6f905fd9f298203935ead477601ed
-
SHA512
b0f6449dc111e83079dda6a8b42c429aa465f0554e81a4f0eba49053c6d9703401850cee778c15398c5bd22b1e5eb2cfaf19cecea316ba182a8cfc65b15274c9
-
SSDEEP
192:nK/tW5wiHawD5swbm5V4xxxhra16OyRpgtMH7N08C5Ah8oTRn:qtEwiHawewbm5+vravx2bNEo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcda95a6af155181ad1fdecaabf04139_JaffaCakes118
Files
-
bcda95a6af155181ad1fdecaabf04139_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE