Behavioral task
behavioral1
Sample
8587c000651d828572f57fe5dda85ea7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8587c000651d828572f57fe5dda85ea7_JaffaCakes118
-
Size
213KB
-
MD5
8587c000651d828572f57fe5dda85ea7
-
SHA1
0393703529fff7c0561bfba96f3b8e150bbff928
-
SHA256
90b643a1ec9109370f3fe0728994990a4ebbe137e27e03988d924dc4ccd1347e
-
SHA512
33ba48f5a048093ab0478ea7d5923213749846451ee38f69e3be51fc19c87bcc2efc4d0ba82a022889f60d3916c9ddb1607e04cede3263d2ce5b359b8bae6721
-
SSDEEP
6144:RC6o+V2Bx4MccZt10LM9/viLE35fbsBIUcxAnoS71nP:RJ7gPZELMsu5f6cx6oSJnP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8587c000651d828572f57fe5dda85ea7_JaffaCakes118
Files
-
8587c000651d828572f57fe5dda85ea7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE