Behavioral task
behavioral1
Sample
b0944245686c36538d9bfbacba7aa058_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b0944245686c36538d9bfbacba7aa058_JaffaCakes118
-
Size
206KB
-
MD5
b0944245686c36538d9bfbacba7aa058
-
SHA1
0fbf0f2efcbd8fa4039c29b304bcf14c86710de9
-
SHA256
e5b16bb07e0c046b82ee7ff18c8fe2a61bcaaf791f0ac2590560ef3c904a87a9
-
SHA512
53bcc0176e8e923a8c28729e07d8dc135a5b4284ee71ffe39ede06c2bf2c7f5e2ed690a9c5b4d4f157434a147ed0e96485ca74cdd9cbec3c0a99bfe9072e8e31
-
SSDEEP
3072:xF6vTTLNMjc0leug38oCCJPwIOtynBAEIQXIdzhA8TqrDJrQMLS+7:xKMRM2ioIOkqdzO8TqHJsMN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0944245686c36538d9bfbacba7aa058_JaffaCakes118
Files
-
b0944245686c36538d9bfbacba7aa058_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE