Behavioral task
behavioral1
Sample
bd08350b87662f7dd6727d7c0ec10411_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bd08350b87662f7dd6727d7c0ec10411_JaffaCakes118
-
Size
147KB
-
MD5
bd08350b87662f7dd6727d7c0ec10411
-
SHA1
9b81cc10ee01cb66a2bfd3e9ceb9eca1c4b910c3
-
SHA256
810ab483cb382a2e1e7e85cd369fb235793b6a572cd1f411b606b6c261e5a325
-
SHA512
7533dfdbb72a15619e2e60641211b0dfb7fcf02048057aedf58d7ebdcc4021c7c750181f08eee50b1dfee06aa43d2a117595cbe3164311d4640b43abcfb1207f
-
SSDEEP
3072:gkfeJrFift+GPkYHw/HDhfj94M2/TFVGa8al0YbPDErliabEETYblAe//v0Eubov:gBBFil+G/HyHonUYXeIATi2iMlboSe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd08350b87662f7dd6727d7c0ec10411_JaffaCakes118
Files
-
bd08350b87662f7dd6727d7c0ec10411_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE