Behavioral task
behavioral1
Sample
bfd60a2794dc6c778ebfffe7d6f96e7f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bfd60a2794dc6c778ebfffe7d6f96e7f_JaffaCakes118
-
Size
143KB
-
MD5
bfd60a2794dc6c778ebfffe7d6f96e7f
-
SHA1
c610f39cfb095f19faadaec957c4678564bed821
-
SHA256
8310e7b0f1d443a78ff7c1f3392b8e06e62b8ce4a52ea78a261467d710e995f0
-
SHA512
0b962cf9a87e912c7962dc7b589fbb7fae645d9b71279fae684afe55f8a8c5a86d371104b77a200df213f9c6aba848545b942e7adb1db10e69defb5c4a993e4a
-
SSDEEP
3072:2WNSPTuUdzh5vaBAzmeu2ZN3PpJ6hIAsdxn6sM0TZMl9V:NNS7uUdzh5vaBAz5NBEhIAsdxn6sM0Tc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd60a2794dc6c778ebfffe7d6f96e7f_JaffaCakes118
Files
-
bfd60a2794dc6c778ebfffe7d6f96e7f_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE