Behavioral task
behavioral1
Sample
b8dfe31b775ba106b2e370d48b450d4c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b8dfe31b775ba106b2e370d48b450d4c_JaffaCakes118
-
Size
89KB
-
MD5
b8dfe31b775ba106b2e370d48b450d4c
-
SHA1
481f365dac4e91e9a9de7193f25c9308e05f7024
-
SHA256
5a3699abf7f9c2199d56c59ea89b0a52bdbd5cac8391b76b768b3c184a268d39
-
SHA512
6eb0702e1f695fd1a1edd4b294952c0482062acd006505c752176000f2d6456198f00e91f8de6b374b6833fbddbf7ddfcd42e581b635cf49a15f439d3fcf5e33
-
SSDEEP
1536:/cSlkWkIlq24p3zG5YSArzRRdkJbQw8Jkj0VOWbunM33a5sKnouy8h:/cSlkWkCqj3E0vdkJbw1l33aOSouth
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8dfe31b775ba106b2e370d48b450d4c_JaffaCakes118
Files
-
b8dfe31b775ba106b2e370d48b450d4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE