Behavioral task
behavioral1
Sample
85d0949d4433ee0c9d6c5780f27bd954_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
85d0949d4433ee0c9d6c5780f27bd954_JaffaCakes118
-
Size
784KB
-
MD5
85d0949d4433ee0c9d6c5780f27bd954
-
SHA1
273fcd71c921c62a6933af8d7d2e357e756af854
-
SHA256
031381c66cf04c790d941d416fdbddb2d096d0492c9013b537dc9f86ee99e333
-
SHA512
2ce2547c186af3c3312b1c5a0ec02cc9cb4b64eb614c8783f0780ed30719d2884677e784edafac85bc6f1f92dab543613e3ffbe7bbed44cb381b042fae50a0b1
-
SSDEEP
12288:yAOT16VtnovOuIempLo2wWp+8ijmfOGz6Pj09l6CPeGJxbJp5DnUJ3o0gOm+Kwd:yqLovj2dpBijmfOGqel7dp5DKg7O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85d0949d4433ee0c9d6c5780f27bd954_JaffaCakes118
Files
-
85d0949d4433ee0c9d6c5780f27bd954_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE