Behavioral task
behavioral1
Sample
bfaaa57dce35f4cfe956ae1b4ddbd8f5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bfaaa57dce35f4cfe956ae1b4ddbd8f5_JaffaCakes118
-
Size
136KB
-
MD5
bfaaa57dce35f4cfe956ae1b4ddbd8f5
-
SHA1
6bdd8d5125c125aae01e0bdd2bc4a23a067e95d8
-
SHA256
f6c65f90bd5bdc22083b1430352ae2eb26663897104a1b2aa9b683dd0128fd10
-
SHA512
dda26bc0f67008e85774ba6e452ef4ee7dc1c9bb41e89eea4049d40cb202dbb6687ac1aca70faf46999114177d740fff6ca7963347d96999610d37178d11a763
-
SSDEEP
3072:kOvU3ycX/6BbxZa2pUgxBGjv9hBC0j1i/NU8bOMYcYYcmy5z:XvvcilxwzgxBW9hBC0xi/NjO5/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfaaa57dce35f4cfe956ae1b4ddbd8f5_JaffaCakes118
Files
-
bfaaa57dce35f4cfe956ae1b4ddbd8f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE