Behavioral task
behavioral1
Sample
be577e74f6590fa88ce1bf8a494d613e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
be577e74f6590fa88ce1bf8a494d613e_JaffaCakes118
-
Size
651KB
-
MD5
be577e74f6590fa88ce1bf8a494d613e
-
SHA1
0acec1d06a4c99f75f4d354f60b0e3cf9fd93dea
-
SHA256
2d21a1765c4bd12b0bdd95241406ba66ebdc4b30800d2a8826219eb9201573f5
-
SHA512
5ca78d0e92997bb2a75a7bbfb68f406625b7643804e7c74765f60d3d9fe51f5d7f4601399b3225b2d1651d84a5a42c2361b0a9e3ee6e8cbc1643728e72837c12
-
SSDEEP
12288:6kLgZ9yqTu/0jMxsW+vHxjyPSnH6FObnBKGQB4LqAq6628ySi52lw/yMJvb/Mx:6kgjyqC/0TRjyanH6FObBKGQBwqVUiwq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be577e74f6590fa88ce1bf8a494d613e_JaffaCakes118
Files
-
be577e74f6590fa88ce1bf8a494d613e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE