Behavioral task
behavioral1
Sample
b8131b5e50ec11a5b0fa481e7b60963b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b8131b5e50ec11a5b0fa481e7b60963b_JaffaCakes118
-
Size
9KB
-
MD5
b8131b5e50ec11a5b0fa481e7b60963b
-
SHA1
22775f1d2a91b6dc64d76f7e35e304ac2fee4e0c
-
SHA256
0d2d9cd7e4939a3f2fd37675829b600a9c1b6247a4df043d68f307081d83dfce
-
SHA512
1ac58b23c97b12d1cd0de4e390bcfc24e01f82c4474fe71594b868df4dcb77142486203a9dcbf10cddd86ec8aaca53c48b6fd7133359f806e4eb4c7528b07b74
-
SSDEEP
192:bxzUB4ganTAR9jpjoOmtx2cMFaNJhLkwcud2DH9VwGfct6CR:b24Bnq9m2cYaNJawcudoD7UZR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8131b5e50ec11a5b0fa481e7b60963b_JaffaCakes118
Files
-
b8131b5e50ec11a5b0fa481e7b60963b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE