Behavioral task
behavioral1
Sample
87c4cb6aec90c9360a4eedb67e9934c2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
87c4cb6aec90c9360a4eedb67e9934c2_JaffaCakes118
-
Size
12KB
-
MD5
87c4cb6aec90c9360a4eedb67e9934c2
-
SHA1
40dbffd3e559a59e5dbf6f8d734fd20a6f96b2c2
-
SHA256
6954b6f56500c78a9ee13ec98d68d967c4f473754fd2a4e9b2b3463ff032fc90
-
SHA512
794fea7179832084313a6a453cff290920ef4a7de088ebe0973da89d878b9ac87777094dce5ee9d4c2893e5eb006e3115a67e62240f8ebe60cc204430b6b08d6
-
SSDEEP
192:7n65HTG68r8AlgfGIJOd/GUloVntYMavmJBKG6lFC7UOqefpI9AN:sTx87kGaE/VoVt77KGEC7qOm6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c4cb6aec90c9360a4eedb67e9934c2_JaffaCakes118
Files
-
87c4cb6aec90c9360a4eedb67e9934c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE