Behavioral task
behavioral1
Sample
86a20f9e68cbc694ffa655e54cd312d0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
86a20f9e68cbc694ffa655e54cd312d0_JaffaCakes118
-
Size
13.0MB
-
MD5
86a20f9e68cbc694ffa655e54cd312d0
-
SHA1
2f8eb9600d7b06b9ca7233a7114dd3add0ebfca5
-
SHA256
bcdd8e6a1cd7ba1e4447ee961bb71ef5b59e19fff18eb1f1cd8b460f88ee10cb
-
SHA512
1b84dd0766d347e20013ffb21a8d717736622e9967d73e25dca2cfa4ff8038d808e7787e13a746c56715557b4853a11809452a5565cce8e6fc995ec7320f1eec
-
SSDEEP
6144:HPpTaXUvSB5KLwhLTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTa:HB0OtgC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86a20f9e68cbc694ffa655e54cd312d0_JaffaCakes118
Files
-
86a20f9e68cbc694ffa655e54cd312d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iiw Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE