Behavioral task
behavioral1
Sample
83a3642ebe95b398b6c90a3b087aacf8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
83a3642ebe95b398b6c90a3b087aacf8_JaffaCakes118
-
Size
331KB
-
MD5
83a3642ebe95b398b6c90a3b087aacf8
-
SHA1
355a054948305eddf1b67f84398041a922924826
-
SHA256
da37456365e7b4409449cd5b34efdf065e03e2cb4ea4aea333619c9926c3ce9f
-
SHA512
218674e9b000f99763f194e0b082cdcc4ea040c41caf5c2afdc420a940ab8f5d827605eeef92a2ca08e2c3ec07e3413fe47d4274457909ac912545960c1f5ebf
-
SSDEEP
6144:0vu5R5b5R5ivu5R5ivu5R5ivu5R5ivu5R5ivI:0R1111Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83a3642ebe95b398b6c90a3b087aacf8_JaffaCakes118
Files
-
83a3642ebe95b398b6c90a3b087aacf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE