Behavioral task
behavioral1
Sample
023f8e044c1261c6cfeff95eff038b5a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
023f8e044c1261c6cfeff95eff038b5a_JaffaCakes118
-
Size
82KB
-
MD5
023f8e044c1261c6cfeff95eff038b5a
-
SHA1
371a71819b99d6b2feb01b6f8814761a88913eed
-
SHA256
eec070f44f886884ac50b9f6c7be4c43f29e410d7a3d649e869984d6a06627df
-
SHA512
2ba8f768d715bf331a7a11615232f3e17cf97a02aaee499a5ffbbd69c3218ba5487bf66be13c606c7011daf39317caf2642e394a2b116d014e1034b9643f15fc
-
SSDEEP
1536:TvQBeOGtrYS3srx93UBWfwC6Ggnouy80ByJAj6ozXr+NUjz98c:ThOmTsF93UYfwC6GIout0ByyZrmuz9d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 023f8e044c1261c6cfeff95eff038b5a_JaffaCakes118
Files
-
023f8e044c1261c6cfeff95eff038b5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE