Behavioral task
behavioral1
Sample
8200a85a62952377a079993339c890b7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8200a85a62952377a079993339c890b7_JaffaCakes118
-
Size
17KB
-
MD5
8200a85a62952377a079993339c890b7
-
SHA1
25ce00057270b82d1d68626101b92d0312a05677
-
SHA256
4b6218882d4a3118cde0149cae4eebe1b9816030d58a85a57d24be5d5205471c
-
SHA512
116333cfa2f507b4fd0edfa1394920d0552c15e2ca97013e098fcbe0e8b8828f456ca26f6423290b9ff2ed0616041fd6a291d88e77a3bde08a110dc917c7fdc7
-
SSDEEP
384:gAHgBkqjBQHoRYQHreB93yAQlgvTzWO/B4UGd:vYkUQI6bCAFvTzl0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8200a85a62952377a079993339c890b7_JaffaCakes118
Files
-
8200a85a62952377a079993339c890b7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE