Behavioral task
behavioral1
Sample
b4c80eb1ae24f2fbc5b1cace9b5e4313_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b4c80eb1ae24f2fbc5b1cace9b5e4313_JaffaCakes118
-
Size
151KB
-
MD5
b4c80eb1ae24f2fbc5b1cace9b5e4313
-
SHA1
dc8debed0ca1792718445e915bb44ed913fda221
-
SHA256
4e0a3f936f8e6d4a5996a2324d921aae485c7203db66753282e1d1bc832650d0
-
SHA512
032e3941b04eb12032a3a328dc692fad4d9189fc9f6ece1f17ef61e19e2831cdc2880e87d18750876cd52678a28bff87c9a3b51dc04572dac88b8b065a37976e
-
SSDEEP
3072:9Ll1KJdi/89R5l8aeutrq021N/wkUVVwBqvbH4Og72VMZte8P7lgCouhJ2:70r2atu02BUV8KUZteGVoyU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4c80eb1ae24f2fbc5b1cace9b5e4313_JaffaCakes118
Files
-
b4c80eb1ae24f2fbc5b1cace9b5e4313_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE