Behavioral task
behavioral1
Sample
b8f6022b020c4d882c0b3d1bd50dad0a_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b8f6022b020c4d882c0b3d1bd50dad0a_JaffaCakes118
-
Size
257KB
-
MD5
b8f6022b020c4d882c0b3d1bd50dad0a
-
SHA1
8daf9867e31349f55f511786f0a00638b3283f41
-
SHA256
fbb2bb46e8e65f6b87bcefc4176db554b074c36e28c5dfb6d9cdec02a0112d95
-
SHA512
dfc329e7889cb0caf5570d76c24d4f05a312effda327cd76b11a4e401d5230522bbd7688c9689dd15e3c416cc96b93eed7ba9e9f9ce360c9498fbbc8d8b17472
-
SSDEEP
3072:x5tzTV5uRELh4HmsZ3aV2GFAWuOyIuYKtt+HITyP6Qj5Ardt28/pwW8O3OZ9WkNG:cpfQ2GFFEJYKFDm8RyZWkNY8qd/t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8f6022b020c4d882c0b3d1bd50dad0a_JaffaCakes118
Files
-
b8f6022b020c4d882c0b3d1bd50dad0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA