Behavioral task
behavioral1
Sample
be56745bf2358bdddda81efc6fd139c9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
be56745bf2358bdddda81efc6fd139c9_JaffaCakes118
-
Size
6.6MB
-
MD5
be56745bf2358bdddda81efc6fd139c9
-
SHA1
d146963bee4356def728c668d88e197f92a7695b
-
SHA256
4a79a109e7d854f95e449b400bd10a04069560eb881cbd4e767e12019e424d44
-
SHA512
7db7405292d502124298ebceb230f278b2574993cea657dd2f6133719d5bda16bc54ac91850e5410c6e2b87a3ed600a2b65c9bdb210d5c59bc7885066f42d755
-
SSDEEP
98304:W7P47GdJByw8B+Rihm1H8aQgO34VvjhL2qAPCP9lHQnz5SwXOq25219zPL:aP4KYjINp5VvdAXS5219zPL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be56745bf2358bdddda81efc6fd139c9_JaffaCakes118
Files
-
be56745bf2358bdddda81efc6fd139c9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE