Behavioral task
behavioral1
Sample
be2df556118005a7dc20f87c6bd3caa6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
be2df556118005a7dc20f87c6bd3caa6_JaffaCakes118
-
Size
25KB
-
MD5
be2df556118005a7dc20f87c6bd3caa6
-
SHA1
0eed23db2bf694aa15246ae54b094870afc72319
-
SHA256
f449cb32fe133fcfc9e961335cf94d46781720095c70f5bcb5a8e4d3d5794001
-
SHA512
a7dba6d695f1b2919b3af2cdeb66783e3147eade863945d4fe3bede67ba0321c8f505c822e338e35ffbaedc1c70625b9a72aa4c144cd8a27b726afa8ac15f956
-
SSDEEP
384:xud73in2toOrEzd66KQ8nYmdpnU3J4tQOF1zrOFeTHAzVKDdI:x43x2OO06MnLLwJ4hFxiFfzi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be2df556118005a7dc20f87c6bd3caa6_JaffaCakes118
Files
-
be2df556118005a7dc20f87c6bd3caa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe4 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ