Behavioral task
behavioral1
Sample
bec36776407fc9e1f9261b9a5da71661_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bec36776407fc9e1f9261b9a5da71661_JaffaCakes118
-
Size
81KB
-
MD5
bec36776407fc9e1f9261b9a5da71661
-
SHA1
1be8310ca5fb3a10ad5f7d031f402ff41712865d
-
SHA256
aeef8eb8152069afed3db8c1a827d00fc5746be9d1c50039f57fdeb735c4296a
-
SHA512
77feb78537ff168b2626affd3827569e729e61540e2b85457d4df71ece67a175df44e19f1476638f97d7fe0f50abb95932aa706e38392736c1ee24aacb501aa0
-
SSDEEP
1536:MPsHUunayP9qZ/Fe5h5OLsb+H8aeoKUIz2tmAYfqJTqbLfOWDsYMLOPil:MP6UuaPRFecu+OGYfqJTqvWMz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bec36776407fc9e1f9261b9a5da71661_JaffaCakes118
Files
-
bec36776407fc9e1f9261b9a5da71661_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ