Behavioral task
behavioral1
Sample
bf6c8079d8ba2b41c576ffb78a1955f1_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bf6c8079d8ba2b41c576ffb78a1955f1_JaffaCakes118
-
Size
249KB
-
MD5
bf6c8079d8ba2b41c576ffb78a1955f1
-
SHA1
0cbae6109fc5b63e2399288f7b896ad13c0885c9
-
SHA256
703c2456d705195e21889614a59be81c578b37e180815a8c63c84c10c663488e
-
SHA512
a3d25887a3e0f3f5416571d7fc83a523a9cb7b8e5a4fc50f4f1f22d49a9dc0f5961a49f48a235aa888a0444d6d917a2d09fac0221c0dfae6988798d7c5fd8699
-
SSDEEP
6144:8FRaI2EqBP/WsZL1PMLl4w0AidVym0EnarUBYVsWH:cR72Eqlus8R45JTnaEY2WH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf6c8079d8ba2b41c576ffb78a1955f1_JaffaCakes118
Files
-
bf6c8079d8ba2b41c576ffb78a1955f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE