Behavioral task
behavioral1
Sample
8535db5d548623ba62914e83604269dd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8535db5d548623ba62914e83604269dd_JaffaCakes118
-
Size
145KB
-
MD5
8535db5d548623ba62914e83604269dd
-
SHA1
d8cf7165c4304ad5f4c0d5f4fef37c9ab8b5293d
-
SHA256
6f490027ae991c00b2452c724c7a79a2fc5301e45f70fa72e874c4eb2c946207
-
SHA512
aa52d5fb8821badd093f89084d1f6e7071a7642b359717b7730e2425a99473eea599e13b97c2cc804caeea3345241db45b50a433988147f360a0a4c5c2169f6a
-
SSDEEP
3072:xTUtZpaaUJ7FlxTTUXdu/6NIqjRcNQlVTLySFdnJPBypFjBVVa4dZ:tcpavHIfNXbzHnJ8I47
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8535db5d548623ba62914e83604269dd_JaffaCakes118
Files
-
8535db5d548623ba62914e83604269dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
duckzam Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE