Behavioral task
behavioral1
Sample
86d9aa34ca44df296dc59a89964cc957_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
86d9aa34ca44df296dc59a89964cc957_JaffaCakes118
-
Size
5KB
-
MD5
86d9aa34ca44df296dc59a89964cc957
-
SHA1
2830f7fed49a7b9a9fbcc6090ef8b782ce72e6bd
-
SHA256
453ecf3dc4756b2bad92b785f16d1e048b5d5679a240a29cea2e83baca0b5755
-
SHA512
752b4555bcf27a5ce05ec6effc844a73b1100983a0a8e72296543360605bc559be6365ab1ca1bb1d92d693a0a05183da94585919b196e6e9f5c4d4db08306031
-
SSDEEP
96:xpJj59wunOM5+HRWTwRU6Kr5cgCd2fbYgZQkOrKpsQ1:3t5NOM5+xMwRUzrg2jYgZm+pso
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86d9aa34ca44df296dc59a89964cc957_JaffaCakes118
Files
-
86d9aa34ca44df296dc59a89964cc957_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 733B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE