Behavioral task
behavioral1
Sample
81f2a82620b6bd0e7af12059811dc04b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
81f2a82620b6bd0e7af12059811dc04b_JaffaCakes118
-
Size
234KB
-
MD5
81f2a82620b6bd0e7af12059811dc04b
-
SHA1
9b82c93da2f5c63dab38c900dbcfc07dd9050e57
-
SHA256
a5ac28825b49a818d6f8834ef0223e379f1457b7973135d9917b7ca307cb281c
-
SHA512
dfdf90ae3f78e5d19570de09a72f3d539a011b931bfd96a53bbaaecab5a3ae1264f26ba6958bcd8652d4296fd54c88b0e9ea227bbc884da038525c4c14fae8d0
-
SSDEEP
6144:AFfnHSNo1/zSGvGUxLk8r0Ei6eK+9xB6MsH9FNL8oS17:IfyNoVS0lLkhEi6n+/BgNL8oSB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81f2a82620b6bd0e7af12059811dc04b_JaffaCakes118
Files
-
81f2a82620b6bd0e7af12059811dc04b_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE