Behavioral task
behavioral1
Sample
bf4223bd1286bb6a81126c688fcfdadd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bf4223bd1286bb6a81126c688fcfdadd_JaffaCakes118
-
Size
784KB
-
MD5
bf4223bd1286bb6a81126c688fcfdadd
-
SHA1
189822c377fb8fbcc999481227a65f535d026a5b
-
SHA256
82ab00ab1fc2680a4486dc2a3ad94243ddcbcdcbac9f8c11642d95b8200c1ee8
-
SHA512
2cf76bc659e6eb4eb2bf1a699311f86b392e75a37e3e9fd16aa1f9c5eb913e959eab784cc240b1bb5639d5db912f72a5b8eeb41239de5e6110719525d9f0ae1b
-
SSDEEP
12288:eZKyQMuRujLwiOHGafA6fsdMM3h4uQ7qkV/Wti6olHJgwM+SVsv9mevL8Gd:eI1+QiH/6fsdMMx+7NOtgg5+ys17ou
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf4223bd1286bb6a81126c688fcfdadd_JaffaCakes118
Files
-
bf4223bd1286bb6a81126c688fcfdadd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE