Behavioral task
behavioral1
Sample
bde8c43fd0dd4c4c1161966866b0da87_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bde8c43fd0dd4c4c1161966866b0da87_JaffaCakes118
-
Size
186KB
-
MD5
bde8c43fd0dd4c4c1161966866b0da87
-
SHA1
1dd58b5d48062a0c172024088f09bf598be9feac
-
SHA256
b5ed88fd7a249bf1d82cb0d37ba8317ffe861579bdd33d587b373573e53818cc
-
SHA512
0d15ff646135b059ff45f6c228d85d797f41db26fd608d5f4b038f6aa6148d404a112549d3eb74db05129cb62c466689f29872e8ae04eb937b12ff7f64409667
-
SSDEEP
3072:DeldbHsddYN1l2lD/mBVaGcCx4CYsFN/q1VfreNv5c:032F/saGcCaCYsKj6R5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde8c43fd0dd4c4c1161966866b0da87_JaffaCakes118
Files
-
bde8c43fd0dd4c4c1161966866b0da87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE