Behavioral task
behavioral1
Sample
81c90fa126e858ee43ab3f26f7fd6a31_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
81c90fa126e858ee43ab3f26f7fd6a31_JaffaCakes118
-
Size
2.3MB
-
MD5
81c90fa126e858ee43ab3f26f7fd6a31
-
SHA1
54812aed112bfdf77696e01ebc36f5ba43f9a9a1
-
SHA256
deb96807a620c563c4a103777226b994ac781c1a09462d8816057c3deadbfd09
-
SHA512
a198a3bff12d836ada5f55cd37333dcf1795e10f258117e09002d4258e887dc64a2bde02040ac9fda7baefd28192fb635fabc883a986331c1d0f8a6ff264ffee
-
SSDEEP
49152:GCfpGwJy+9aghkYd30M9l/SbR8jbLPUcw46XnGbo/:Hf8mJsgiM30MDSbR8jb7UCTbW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c90fa126e858ee43ab3f26f7fd6a31_JaffaCakes118
Files
-
81c90fa126e858ee43ab3f26f7fd6a31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE