Behavioral task
behavioral1
Sample
86e1c1b85e152694d54c96485644cc05_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
86e1c1b85e152694d54c96485644cc05_JaffaCakes118
-
Size
2.4MB
-
MD5
86e1c1b85e152694d54c96485644cc05
-
SHA1
8a786d6e6b20cf4645680443ef43dc6ac2e08e88
-
SHA256
401915c24e5cca6ec30ffacfae3a45796f94e930be25710d744f87975c7c1c5f
-
SHA512
db5fcb2243882bbf866c2befec3e1cf0444277d73cc3c240b858b0111bb4a7d2fc5c52a891deafc5cd50d15766db6915a1bfe209f00c5b129c866124f668e28e
-
SSDEEP
49152:4ZzqC5UZhWpeXQ/3f6zD3qWQYS07GWPIkWrLyjBHcQ4JrATJifweYJ:QR54h7A/3Q75QYS0yA9Wr+jevJET4fwn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86e1c1b85e152694d54c96485644cc05_JaffaCakes118
Files
-
86e1c1b85e152694d54c96485644cc05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E" Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE