Behavioral task
behavioral1
Sample
bdf6ba7b3cddcd165c4697aeb1bbafdb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bdf6ba7b3cddcd165c4697aeb1bbafdb_JaffaCakes118
-
Size
784KB
-
MD5
bdf6ba7b3cddcd165c4697aeb1bbafdb
-
SHA1
b8af58bbbbcfb7417475e0c01c15255e9632ba07
-
SHA256
1adde4060ea399bffb0c6ec08f2c7dbc47e475ff59467110f6502ed626da568b
-
SHA512
716ac60b1d49b0dca41ccff7c7f8ea1f307d3f691143e0648733a31dec10b7378ddecd055767ed66f3f1d130c982f62cc73d0569a3a6ec7f746170618ac59bc5
-
SSDEEP
24576:Se9EnSDa39L+S2jdLVbbnlMQx6DetftbS6Rq:HEnHr2jdVbndIetfg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf6ba7b3cddcd165c4697aeb1bbafdb_JaffaCakes118
Files
-
bdf6ba7b3cddcd165c4697aeb1bbafdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE