Behavioral task
behavioral1
Sample
00bff50a0d38852e240d1c2d0378e96f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
00bff50a0d38852e240d1c2d0378e96f_JaffaCakes118
-
Size
134KB
-
MD5
00bff50a0d38852e240d1c2d0378e96f
-
SHA1
5e9e3f6d70f4e8abe3950ccdcb21c1452db4f0ac
-
SHA256
b940f3a65250df973be7f663dc5bf2668e96e88c21ca0a9f0f5e3d7adb6a6ef2
-
SHA512
011caf54d808fe72f950e615d4edc0e0c0d51e0fa4f75e63551b2f8a4715bc4c89a5cddb87186b0fc759247f7f1bd538df30fd3555ef021167c27eca4ac0647e
-
SSDEEP
768:sYEOOokVRqUf4UE0cs2ylA1FUE5QVM2abzePQRE5ubU2CQ5yv+4n4jXAAIr9J9BN:s6A2CQ5wX7mT2S2r8mzo7vc+LAp7Qq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00bff50a0d38852e240d1c2d0378e96f_JaffaCakes118
Files
-
00bff50a0d38852e240d1c2d0378e96f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE