Behavioral task
behavioral1
Sample
bfe22014783366ceada777e12d9a4e14_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
bfe22014783366ceada777e12d9a4e14_JaffaCakes118
-
Size
134KB
-
MD5
bfe22014783366ceada777e12d9a4e14
-
SHA1
64db294669eb0785b4f7d563a274e0e9dbcba290
-
SHA256
11ce8c4b78b31ce4826331a672a5ec65598598859b22beef397d121970a74a04
-
SHA512
60db04189242ceedbf9e61c20dc2dea9faf92a8e3447ce2dffbe04f8edd389b5e8ce655b8060632665e8f676335c92585195537b7f03ebe8980dd74666b09632
-
SSDEEP
1536:QSQ2C9GGCJ5q4YJrht83ivzo7vc+LAp7Aq:QSQ2/G+o4YJ9t83mIv5Ep7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe22014783366ceada777e12d9a4e14_JaffaCakes118
Files
-
bfe22014783366ceada777e12d9a4e14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE