Behavioral task
behavioral1
Sample
bfa20e221dd24dac89a4d912d9acd57f_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bfa20e221dd24dac89a4d912d9acd57f_JaffaCakes118
-
Size
5.1MB
-
MD5
bfa20e221dd24dac89a4d912d9acd57f
-
SHA1
df5847af929ab6793cc3bfbe379045234a65be96
-
SHA256
98ac98e41df8bc1c8a595f23c64a2a91dde65e24a3ce7dfb1ad41c034e2347e8
-
SHA512
d89f31d05539b6bbf33b50f5b3d9aabe2dfd50addbecf6c62f5e71e4962610f64131ce13da5d9123ff67568cd0c41eae7b53d62730dda1764a14d8c980896a90
-
SSDEEP
98304:+DpeNcAbm8iYKsMkUyiYqC5u6Q4iTjzOcDuXkvMZwhKdw/MpfPqNKcdJ:+AGjYKsnUgAjZuo1MpnqN1d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa20e221dd24dac89a4d912d9acd57f_JaffaCakes118
Files
-
bfa20e221dd24dac89a4d912d9acd57f_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 35.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE