Behavioral task
behavioral1
Sample
be5b10e6d5c60a691c78f92ba3009dbe_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
be5b10e6d5c60a691c78f92ba3009dbe_JaffaCakes118
-
Size
784KB
-
MD5
be5b10e6d5c60a691c78f92ba3009dbe
-
SHA1
d4e083011c80fa25b4dc846ad78ea320861246d7
-
SHA256
dd25c9e5ca597f12c3a1c91e53fe57f3c4d6b635dfa8852f93840a480312e335
-
SHA512
d49e7a7ea7c6d7e176d2c962f0e28687a02dc20ba347f5ad6090310a00a7539f173bdaa69ca8fcbc4d1acb9422690ac13b37adbc5ef9348d19c8b44cb673d033
-
SSDEEP
12288:ESMjbAYkmrIUvdTBusYtiIwP1D8vy/V48bRGrhrMiDaHC7eCoH:ES4sYkmzv6tiB9DIM4EAIHCBo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be5b10e6d5c60a691c78f92ba3009dbe_JaffaCakes118
Files
-
be5b10e6d5c60a691c78f92ba3009dbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE