Behavioral task
behavioral1
Sample
bcf404137c1a6f19422fed27ef89cc9e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bcf404137c1a6f19422fed27ef89cc9e_JaffaCakes118
-
Size
1017KB
-
MD5
bcf404137c1a6f19422fed27ef89cc9e
-
SHA1
df8f13e826ee09d1c98fc8fb5f5cf9ad0df71f48
-
SHA256
8e6de131478d728967a9142e6ae58d89b0df58df3dcc131ab25acb0b1ca445c2
-
SHA512
60f167d46b869b7c2c840134a8c0fd98443d1a39721b66f4d8bc43cf9612f6354c970f9677ad73e79a3f2d36ea17feb00559530073b179c53f575b2f8e694cea
-
SSDEEP
24576:mwXffxcjoT4kVUh9/R475b6EZaJ3pJ/gea5hgXv2f:muffre7/WUEZaJrgeehgX+f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcf404137c1a6f19422fed27ef89cc9e_JaffaCakes118
Files
-
bcf404137c1a6f19422fed27ef89cc9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 994KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE