Behavioral task
behavioral1
Sample
83bc176ba9c8592c83ee18be0b49c389_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
83bc176ba9c8592c83ee18be0b49c389_JaffaCakes118
-
Size
23KB
-
MD5
83bc176ba9c8592c83ee18be0b49c389
-
SHA1
2885d991522572dde0376752331de3ec324f6f2c
-
SHA256
4448fc257b09d0603a6d38a58644903bc6ab0065ef369a91189a93b3ad654b07
-
SHA512
33e745161824c76813a4486fe8ffb0f4b0120f874b906209d16211366e4e583af7ac7253eb3346084dce59ba7e1e560580cc1bd61c95059c079b382593d44d07
-
SSDEEP
384:WIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZcxilXHwzdbrV:WRGuY2P0Vo6r7SiAwyrMRjbCggXnbcuI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83bc176ba9c8592c83ee18be0b49c389_JaffaCakes118
Files
-
83bc176ba9c8592c83ee18be0b49c389_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE