Behavioral task
behavioral1
Sample
b1180f33d93225cb2569af78b94195fa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b1180f33d93225cb2569af78b94195fa_JaffaCakes118
-
Size
35KB
-
MD5
b1180f33d93225cb2569af78b94195fa
-
SHA1
1f5e8e86dec67d0e825cda87dd2046a07f38db2b
-
SHA256
2907eaba559d61916b91b3100ef250325dd1376350eb233af68d8965a3eed537
-
SHA512
b96c58701a4f89baa869efb0e04712d939c7cf14cd7de9a2dbc2bd328e0eb18fa453b9010c4f333e9db20f935e617e7573323427f2cf72b5f44cd8c21b3c934a
-
SSDEEP
384:SD0qB1uA6RQ3TTxXYF/BD1u8HUSFsgyBdCxEobrcEjyo1dlmLcr2PDm5xE4aNdgd:SAjQ3CFImUnBdXo0Ayof2Pa5xOvBVaj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1180f33d93225cb2569af78b94195fa_JaffaCakes118
Files
-
b1180f33d93225cb2569af78b94195fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE