Behavioral task
behavioral1
Sample
be4f2c5cdadd2563b500afc15e118011_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
be4f2c5cdadd2563b500afc15e118011_JaffaCakes118
-
Size
2.2MB
-
MD5
be4f2c5cdadd2563b500afc15e118011
-
SHA1
bb5345ccc874560245f41a636386670fb62f2b0c
-
SHA256
15746ea9b21b1c9582507d852278383b1650f9e7058847557c0bf89cbf4a0281
-
SHA512
c08690a73a45e37168fb96d7d1fac545d1ebd6dd176cd8637732a14e95920e9d92e2c0d57b13e97ac893dc769adacb5c0583c58ab37f1d3e1558090dd78292e8
-
SSDEEP
49152:xEspddGTCHdH6C9v6j8DOozQMeAPxIIMMMMMMMMMMMMMMMMMM+EYMMMMMMMMMMMn:6UxHdNv60e6MMMMMMMMMMMMMMMMMM+de
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be4f2c5cdadd2563b500afc15e118011_JaffaCakes118
Files
-
be4f2c5cdadd2563b500afc15e118011_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE