Behavioral task
behavioral1
Sample
be7be1ac3ac272fd348acb4adec9c0e3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
be7be1ac3ac272fd348acb4adec9c0e3_JaffaCakes118
-
Size
13KB
-
MD5
be7be1ac3ac272fd348acb4adec9c0e3
-
SHA1
6b948c29b873efb4f56379b2438c2c2663d0f762
-
SHA256
81bb84f36a71f0efcf2b47cac980ae63941d8623becd6fb93da4080be2bf67ce
-
SHA512
ef4457f197c4232e341f2c5b75ba57d3ba67e4eb85b0ee66137043a461c8237392fe6c444985a76384b5c5cb274b63ad8bb600e6ee50cb0045c856a61d6c4ed7
-
SSDEEP
384:p8SZinfgWyhWI66k65FAr8eY8uZINCkZEaNJawcudoD7UN:SSQn3yhWB6k8FAr8eY3WVtnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be7be1ac3ac272fd348acb4adec9c0e3_JaffaCakes118
Files
-
be7be1ac3ac272fd348acb4adec9c0e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE