Behavioral task
behavioral1
Sample
83bf446f347f07155d0d3b72c66e9012_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
83bf446f347f07155d0d3b72c66e9012_JaffaCakes118
-
Size
192KB
-
MD5
83bf446f347f07155d0d3b72c66e9012
-
SHA1
b5356889758b899ddd18fb9166495f77be3481f1
-
SHA256
b586e501c490fb6d0342c576cece0d2322e6fc7c56f5ed995eb99839f8278eab
-
SHA512
1a46f2447ae4abb71a4e470490f38ed9e51690ea4632062a827d4c77ec076a64a496fa76596331203592d5d22847bf1ba8affce9a89a4cb8f6a995b897e15830
-
SSDEEP
3072:KgH/ZdhJajsDXykHlrbtm+0D/C6PiTODnbiAiqonHotMVTm8neVXsQ8xgpwym8C/:KgHBdh4jsDCKlAdPi4nbiYEooKiQjpCJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83bf446f347f07155d0d3b72c66e9012_JaffaCakes118
Files
-
83bf446f347f07155d0d3b72c66e9012_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE