Behavioral task
behavioral1
Sample
b0cb5bf6d7d8c9cb713f6dbf541950b9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b0cb5bf6d7d8c9cb713f6dbf541950b9_JaffaCakes118
-
Size
20KB
-
MD5
b0cb5bf6d7d8c9cb713f6dbf541950b9
-
SHA1
ec37fce433db5dd7a0e0b6ffc16eed2a443aba21
-
SHA256
6333ac0a1a51b09d86ba5a9ef35dc4c709f6a59019f8e90872ead03e25fe7c6e
-
SHA512
b6eff42f60ca4be9b50af103b1348ef202594ec90e85e759cb63efcbbf48b33739caa9b694fc1f6b359be67f120af32360eea70a2499bc117f4049cc3cbe36a2
-
SSDEEP
384:6Zdwt+UcXiKpLBtRWchQaS7pgMHRimBLBT7+YHkw9p:6TBUJKpLhWchIp1imqYHk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0cb5bf6d7d8c9cb713f6dbf541950b9_JaffaCakes118
Files
-
b0cb5bf6d7d8c9cb713f6dbf541950b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE