Behavioral task
behavioral1
Sample
b2d059b35ac2c7ebcd0fda0f5221fabe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2d059b35ac2c7ebcd0fda0f5221fabe_JaffaCakes118
-
Size
120KB
-
MD5
b2d059b35ac2c7ebcd0fda0f5221fabe
-
SHA1
608d494ddb834023400f8670657acc3484033ec5
-
SHA256
6832cd10a55663fce360a0fa1aa129d883f81a17b9dde50e45b8cd8991b71dcb
-
SHA512
3239c997058b4bbbee395b9e2ca309547ed82692084191d29d01ae5583198cba7e57b88f9e415e85d5eb6bd8aacae2f313e357f7398cac12fa8818aa212ed6d4
-
SSDEEP
768:voq/ElItqXRfYr2Hsd4FWsIr+CFqhxXoHKpKCkg5gxcXDsNrRioUXqk7fn3LGllE:/QLHipr+Aqh1Iz6CK7UHr4F1N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2d059b35ac2c7ebcd0fda0f5221fabe_JaffaCakes118
Files
-
b2d059b35ac2c7ebcd0fda0f5221fabe_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE