Behavioral task
behavioral1
Sample
86b4bd88f33882890955081cbfd9d6e5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
86b4bd88f33882890955081cbfd9d6e5_JaffaCakes118
-
Size
784KB
-
MD5
86b4bd88f33882890955081cbfd9d6e5
-
SHA1
3d8c14a1b1ff2a9e5a3b44e032d182e054557983
-
SHA256
3b0449cac43f8a1841a8e69908ca8a0c5b9581fd1d7ee62d914ec4e2102aacff
-
SHA512
aedbb43349dea55f9c8a64f26a06d76e65afedcca82a4b8ac4c66b9301023956c2b67a90f9d93e1a123d21aa9d10f95dcecf81ac50dcaf3e6a973e958804a05e
-
SSDEEP
24576:uUfDBaDLk2hJapR72yxuJiKAx2CEMOeOf:XDUnHwl2yMkK6Evew
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86b4bd88f33882890955081cbfd9d6e5_JaffaCakes118
Files
-
86b4bd88f33882890955081cbfd9d6e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE