Behavioral task
behavioral1
Sample
83d80478890256b2b7587936cbd12169_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
83d80478890256b2b7587936cbd12169_JaffaCakes118
-
Size
386KB
-
MD5
83d80478890256b2b7587936cbd12169
-
SHA1
4cd73e655ecc500a5de9ed83a189d0e9f7a9dde2
-
SHA256
b106ae335643182ed56d3548ec30a915fe09fd25cd5b3e35005717e6dfd0c9d6
-
SHA512
5bee738483c36e9b9fbbfc83c32dd3fa115929157e83f13f573338017292e8a594501441be7ac6e7d5369957873f2e62905b65d3aaf9f77677f6bab6603572a9
-
SSDEEP
12288:d9xZ5yN3Cwaw//ikDju436I26h+OoS9OtG:d9vsky/7NKDm+1G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d80478890256b2b7587936cbd12169_JaffaCakes118
Files
-
83d80478890256b2b7587936cbd12169_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE