Behavioral task
behavioral1
Sample
bde239756123a81210c347c0ad72b007_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bde239756123a81210c347c0ad72b007_JaffaCakes118
-
Size
554KB
-
MD5
bde239756123a81210c347c0ad72b007
-
SHA1
d951dbcf37b06fd9bfef69570b7e2d7eea8db549
-
SHA256
413ef223c8bf1f7693977db0a26e6d6b97791375c068fc64821940bc403b6f50
-
SHA512
2e9629830e5ac54862d5d1752779bc60404dd3b9a8d2c61afd2cc9b0cef90e1a5a8fa403b0fdf9edf83de471ecc8647733ae9062ffdbac12f2c8fd3982d7cb49
-
SSDEEP
12288:JHJIbuIcWwwT6pqdSUIBGfGEGbOwDbY5JH:JLwOpZBSGace
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde239756123a81210c347c0ad72b007_JaffaCakes118
Files
-
bde239756123a81210c347c0ad72b007_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 426KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE