Behavioral task
behavioral1
Sample
8208ad67917aae55128967807438a8a7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8208ad67917aae55128967807438a8a7_JaffaCakes118
-
Size
501KB
-
MD5
8208ad67917aae55128967807438a8a7
-
SHA1
040cb37308d0c421a444e39c03fd06fd25fe5267
-
SHA256
28f62a1a3586e9e9dfce4ba67d6c0a7847adee656c4cfc07a1fe80a3cc7b1703
-
SHA512
a8ebd2fe599a18e538d12ff9a8ddab8f2423e48925597c207f2ca5871aeeb7723a30c509485c509e700e1176fb69f01be9e68c5ae46200829d0c1020dd4b7353
-
SSDEEP
12288:NXtYV3GBZdtZkaDbI8oXstHZdW9vPGAnyu5/w:NdYyPaa33dEXj754
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8208ad67917aae55128967807438a8a7_JaffaCakes118
Files
-
8208ad67917aae55128967807438a8a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE