Behavioral task
behavioral1
Sample
bf431a57b9c1e56e7161451e6722ebaa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bf431a57b9c1e56e7161451e6722ebaa_JaffaCakes118
-
Size
108KB
-
MD5
bf431a57b9c1e56e7161451e6722ebaa
-
SHA1
531fb464e9c0b1009686f64038f3e82bce7a92fa
-
SHA256
c925a08142e38938c60d7cd2c0183749fe979707224b7a1fd1d164514e97245b
-
SHA512
41bf5f4ad9b6d7cddc2158bf33e411f737c8c4bf25b9622cf4bf209dc7c0f3658150c4e8913f11e888e151e5576ddb78f1364262c654a1a66504eb7f7aed3cd7
-
SSDEEP
3072:01+MJKrUnFYY5z1i0Nmbi5fJBNL/Jjoout:kIrPj0NmWtNNjooS
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource bf431a57b9c1e56e7161451e6722ebaa_JaffaCakes118
Files
-
bf431a57b9c1e56e7161451e6722ebaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE