Behavioral task
behavioral1
Sample
be108c4e358b96517adda72ace98fe37_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
be108c4e358b96517adda72ace98fe37_JaffaCakes118
-
Size
407KB
-
MD5
be108c4e358b96517adda72ace98fe37
-
SHA1
e54f97263db27b793078bd5eb0ca60d260f12a56
-
SHA256
d7b93c5872589e196d4ebe83d13bef2988087b9650034dd5e7a312d305f4e203
-
SHA512
925950b8c383d08487c91c9a9f76f4eb9a68668b03bb20fcf199c5236bcda35284fc2c602caa674a50e42fbcb56446504e9bc62b5a25c31da04907d8ca6c57e8
-
SSDEEP
6144:5e2e1RqDyZw6umcZ487+LAY/D7uFZx5BWAZ7BtbhZRkJhQ:YP1ELm0CUw7uFZxaAtBtbhZKJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be108c4e358b96517adda72ace98fe37_JaffaCakes118
Files
-
be108c4e358b96517adda72ace98fe37_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 254KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE