Behavioral task
behavioral1
Sample
8705a27e85cfe5f140c372cef57658cd_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8705a27e85cfe5f140c372cef57658cd_JaffaCakes118
-
Size
482KB
-
MD5
8705a27e85cfe5f140c372cef57658cd
-
SHA1
d36aae932f8d3b126a4aafbefbc12cefb5b623b8
-
SHA256
df323c9881b49a6af1a7f750d72747c10c1f3c71d698c8402a508c5899445c90
-
SHA512
398865900529a6f9e3da4d09b10b2624763cd9b548afc0983f112e4c617aca7b319733219fabd7afcbf5d5e744d39744e5270b45fc9771936dba325797694776
-
SSDEEP
6144:It6g5H3S5zL8t+IlY2GZ9qqL032nSCrhrjh24TfUWpdY8zEFRLp+wUCGdubHcQuk:ItztfGqqL0CBhsvrUBdqW4xD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8705a27e85cfe5f140c372cef57658cd_JaffaCakes118
Files
-
8705a27e85cfe5f140c372cef57658cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE