Behavioral task
behavioral1
Sample
bd28c1aade9399d30e707d99391113a1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bd28c1aade9399d30e707d99391113a1_JaffaCakes118
-
Size
285KB
-
MD5
bd28c1aade9399d30e707d99391113a1
-
SHA1
b32d8e2d09a67b21e635f795d8ed7027208e1b8e
-
SHA256
5803696982b2f2cd10df34ab4ef1cc51cf9dc88cbacfe00831c059400598d771
-
SHA512
9613e04bbb58843a718e9db96cb242cf10f2f5ce5e8ce9a4843fc8b768a04c389c026bb54343b78916d3c3eaac5727d29dbd850847eb86a690e2464248bb9379
-
SSDEEP
3072:DqKphiHp5snQ8srLjbxpW3dak1xCpBv+SgKbgEF:BphidSdaSxqBv+S/R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd28c1aade9399d30e707d99391113a1_JaffaCakes118
Files
-
bd28c1aade9399d30e707d99391113a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE