Behavioral task
behavioral1
Sample
858d88c075d65c6f39b7d498e76a8607_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
858d88c075d65c6f39b7d498e76a8607_JaffaCakes118
-
Size
784KB
-
MD5
858d88c075d65c6f39b7d498e76a8607
-
SHA1
85abe315c47f335f8010255de9e2cd8d3cb2de2d
-
SHA256
a4d321fc54f727833e51f5738a333ad013d873e9ce18bbc28ac6ce7f505df67b
-
SHA512
5176502f41dd8b9335ef37ff526e26f8d229e53164ea3d3c859355f63b2968e90a313aeb5b97e326bf64566fd2e954a000771f9a11163526e3922892bc0fcdb9
-
SSDEEP
24576:iX6JerJCajKiSsnOyq4oJoK1BzzYocA9:4frJrdSsnFdoFBzz4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 858d88c075d65c6f39b7d498e76a8607_JaffaCakes118
Files
-
858d88c075d65c6f39b7d498e76a8607_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE