Behavioral task
behavioral1
Sample
8649ea79f764e7a27c07a2ee2deb45e7_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
8649ea79f764e7a27c07a2ee2deb45e7_JaffaCakes118
-
Size
22KB
-
MD5
8649ea79f764e7a27c07a2ee2deb45e7
-
SHA1
f055eb02350058ad0c2b9bdc61087d47bcf8a343
-
SHA256
b88fd2b8a75db5e5b7ae1ba5a9edc640583a497f45044edabe02a007bfd909bb
-
SHA512
9013d62cf0152f65bcbe5e646769756532a5d953de0989b1ec8ef0e152a03bfd0eeb0c401b921a29358023d9a2e2dfe16cb5540f264c7e2a78cdd7a28a5784d4
-
SSDEEP
384:pCAzJFi0InS2KM+RMucBxS6j96MPi6a7rLIjTOVAfyCja7smaNJawcudoD7UbR:XznC1d2My6jwMRULIjqVAlHnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8649ea79f764e7a27c07a2ee2deb45e7_JaffaCakes118
Files
-
8649ea79f764e7a27c07a2ee2deb45e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE