Behavioral task
behavioral1
Sample
86eb1138c302304dc90dd0d2e219e408_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
86eb1138c302304dc90dd0d2e219e408_JaffaCakes118
-
Size
204KB
-
MD5
86eb1138c302304dc90dd0d2e219e408
-
SHA1
a5bec8d0aec33178758ce9ba45a5a66ad1cffcea
-
SHA256
1ce25636e5f6c9dd14548f757d070028f83d0d6a8f6c60a5ada9308e92998f84
-
SHA512
ed6eabc17a1a048c905184d21142dac969d688d788d5bf44dc0300448fc57dada2aa3bba7fa9fcaeb26db52c8b7a3115498133303ab6b4dd652a8735ad5b385a
-
SSDEEP
6144:4oXbm6bbSYmmSDSZzDlHZGQXIHNOv3KaQJpd9I1h+UoSb:4oXyvlmSYH50Hw3tAyjLoSb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86eb1138c302304dc90dd0d2e219e408_JaffaCakes118
Files
-
86eb1138c302304dc90dd0d2e219e408_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE