Behavioral task
behavioral1
Sample
bf423ab0b728e6b5090b8a89ac538457_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bf423ab0b728e6b5090b8a89ac538457_JaffaCakes118
-
Size
240KB
-
MD5
bf423ab0b728e6b5090b8a89ac538457
-
SHA1
60680149f1be01d4f275be070abbe5aed3322f7c
-
SHA256
91b4c27a8582535a33bf339f371d91dde052bf53e075e0c86baa6e942a1fb3a5
-
SHA512
72d5c76e0063e554e945c697025647ca54c37fa5e0f2189d1949d7223365a8e318dd46bbf2b0f81eae72a83fbbf3e91b8500b6721129aef3d443db8e76a9cc99
-
SSDEEP
6144:ENvSpTIJzzubRyLaIsXY7ofE9eS1LoajGcYZG2jxoSUN28v:EBohRy7sXYMsoEoWGcYBloSUzv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf423ab0b728e6b5090b8a89ac538457_JaffaCakes118
Files
-
bf423ab0b728e6b5090b8a89ac538457_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE