Behavioral task
behavioral1
Sample
880b3f21be4eadfe52600562433663fc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
880b3f21be4eadfe52600562433663fc_JaffaCakes118
-
Size
29KB
-
MD5
880b3f21be4eadfe52600562433663fc
-
SHA1
0a4f35789e1e151d65c4d14de9e039f345a4a520
-
SHA256
1b553b8d7340dd4d4888a782e35d11e676ecb97f2d09c75f0e6c75146325ceb5
-
SHA512
d1aac885e00b0d8feacd5520b0fea862d78c4d9e0249c0fd1cefae2e3de920ebbf32ce0c8fef0727848ecdbd6fe245759e1e5c4a47556fadf0dfb90c4761b066
-
SSDEEP
768:09Qy0raXGhWooNkUgPxt6jcsEEz24RNYcz:K0JhrPxtvjg/z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 880b3f21be4eadfe52600562433663fc_JaffaCakes118
Files
-
880b3f21be4eadfe52600562433663fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE