Behavioral task
behavioral1
Sample
05b80cb385a133a59fc692363a38ea6b_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
05b80cb385a133a59fc692363a38ea6b_JaffaCakes118
-
Size
118KB
-
MD5
05b80cb385a133a59fc692363a38ea6b
-
SHA1
9c2669c83a7118eb7a712090260c45d28e76a7d8
-
SHA256
d4eb87364a0bcc1a6565335f3f23a451bd526c715b01fe63cdf7f9e7f1c5d03b
-
SHA512
01a2ddc8316e2519a40f42971691b3ac452f97963453429a1353b40b627a87f51b90c21e833e035ec389025b87f261f0eb8f084f8c14e9d04cda3f6105e79db0
-
SSDEEP
3072:C09Ur+a9N33m51YUKUBQa4WPMaKjDkQWuNm:c+a9F3m5CUBPMaK/kQJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b80cb385a133a59fc692363a38ea6b_JaffaCakes118
Files
-
05b80cb385a133a59fc692363a38ea6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE