Behavioral task
behavioral1
Sample
be3d3ed2eca8552e883fa44b3f8e91fe_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
be3d3ed2eca8552e883fa44b3f8e91fe_JaffaCakes118
-
Size
212KB
-
MD5
be3d3ed2eca8552e883fa44b3f8e91fe
-
SHA1
83001b7586d2518482295b9f7981bf44000f04f8
-
SHA256
881ffb0ba5ed2816c77a19ebd0173bb29c5a73d86fd465af823d5a6d7fe79fff
-
SHA512
0419666445f696e83a05d961356d488b839796da796d7258186eb9d9f4b0219ae10cf59d3ddadd072c9ac421280e3cac4a2a80fe9e5f01004da1b07e6ff54492
-
SSDEEP
3072:+5q0k6RwQipfmqdFbGhbOh39JxrW9Odkm7SGkTr0obLIbWKxOQRmJ//LXG6vNqh:Pj67q2hM9La9S3kPZLVARmxXGth
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3d3ed2eca8552e883fa44b3f8e91fe_JaffaCakes118
Files
-
be3d3ed2eca8552e883fa44b3f8e91fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE