Behavioral task
behavioral1
Sample
008b971135244a793cf3d42c7d66eddc_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
008b971135244a793cf3d42c7d66eddc_JaffaCakes118
-
Size
6.7MB
-
MD5
008b971135244a793cf3d42c7d66eddc
-
SHA1
9a14c4590fe07ebf1a76a35564435a2bcac1226d
-
SHA256
2bd57eee7acc6fdc88c5e0a52576dc4c6748b997e00e768ab43b0ba5af7768d1
-
SHA512
66a0e76d8c37ccc2b1cfc02b03ab3179b029758b18463bca670abab29305c782d95be4e9043377ef1b0d653a68c5c21de7fe5e597ad00ed36c2cdb95ca0dfed2
-
SSDEEP
196608:ep/WupjoHeRLGdnm8t5C+9VqC6xtCwHNN:eJxNwHQC6jVtN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008b971135244a793cf3d42c7d66eddc_JaffaCakes118
Files
-
008b971135244a793cf3d42c7d66eddc_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE