Behavioral task
behavioral1
Sample
c1bbe5cb52be9af27042d40a1201de99_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c1bbe5cb52be9af27042d40a1201de99_JaffaCakes118
-
Size
118KB
-
MD5
c1bbe5cb52be9af27042d40a1201de99
-
SHA1
df5114feb9dcf1a1b67268005f12ac1eaceddbaa
-
SHA256
786aee922bf91f19cc91ec9db2a7b4f172d54f8efc1f16a488c7f4affb06cca3
-
SHA512
a747b42e4939a389793903e2c8f8c2bc7516a0b66ee765773d175ce04d3b227a8c9821cb771152e57c67eed046d513e29e3d5db59aca24a09100cba70e6afebd
-
SSDEEP
1536:HQZG4cc10+/VPaPVfaei8sy8K4jO+DQFCn6zz499i64a9NOLmqEXQzPtHU9:HvwGNi8sy8K0O+OHX49E6sEgzPtH0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1bbe5cb52be9af27042d40a1201de99_JaffaCakes118
Files
-
c1bbe5cb52be9af27042d40a1201de99_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pvlffqh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE