Behavioral task
behavioral1
Sample
86e15da6b0f2400fa94129c321c360b5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
86e15da6b0f2400fa94129c321c360b5_JaffaCakes118
-
Size
88KB
-
MD5
86e15da6b0f2400fa94129c321c360b5
-
SHA1
5e4fcf3aa5a7b921dc3d7b9b552f98a7a198935a
-
SHA256
51b1b6e3784e15e640a911ff9fc5ef3ead1aeba212696e824952666727698616
-
SHA512
a2656162a3b84e47415f4240542bd355d8f903c5830e6f54ea6744a6fe16e83381bff53a3febc79f96dc62d6a7798db85786aae0c96b6d033869e041eeb7ced9
-
SSDEEP
1536:kMlEGcxjT/MuynpCMIAba5QDicktkBqWXxseByVpc6/Z/AAwO1X8kDqWn8MiNWCK:k2Etxj4zpT7ba5QDiDKBq4XkvXNlJWWb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86e15da6b0f2400fa94129c321c360b5_JaffaCakes118
Files
-
86e15da6b0f2400fa94129c321c360b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE