Behavioral task
behavioral1
Sample
bf05392caf584bffade3f0f592ba304d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bf05392caf584bffade3f0f592ba304d_JaffaCakes118
-
Size
397KB
-
MD5
bf05392caf584bffade3f0f592ba304d
-
SHA1
fe3d4321350427baf272d5810c364b58c7efeadd
-
SHA256
6c7282073b5881356bab20e53bf195a03aa23aba26d5b112c0a7b9a74578a53e
-
SHA512
4267ac0655d0e34f0210480e526f780beaf4651c254d23b8f255a63f0846c1da16a0bc007fbc5a592e55d86f151d981e8ad62ee7af63e042e1e11c25f22e3104
-
SSDEEP
12288:J7MEFQhxQGcLWS+JQlVcfS+kRGSORwT7I6QYW:OEFeQCJMifRkRML
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf05392caf584bffade3f0f592ba304d_JaffaCakes118
Files
-
bf05392caf584bffade3f0f592ba304d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 394KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE