Behavioral task
behavioral1
Sample
b0b4a0cae97355922dc75faed897e383_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b0b4a0cae97355922dc75faed897e383_JaffaCakes118
-
Size
8KB
-
MD5
b0b4a0cae97355922dc75faed897e383
-
SHA1
805e490f67a4784c5817dff32edd68a724232f53
-
SHA256
76995cf93c100238dbba284386163e7dd15252984637f3586e69360d6019e99e
-
SHA512
4cd957c5f99494f94c62160f155139d38c08dcd390460bcd46cce6149e09683a13bf33cbcfaaaeb05329bd3827bd53d2da5e96326da221477db3e49f91f9d853
-
SSDEEP
192:oBkRVpSHr7Ub0lr8dSZsHmuCB/5+R96rymj68glGKAuiMTW:RzpSvUb0pwfjdazGJrPS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b4a0cae97355922dc75faed897e383_JaffaCakes118
Files
-
b0b4a0cae97355922dc75faed897e383_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE