Behavioral task
behavioral1
Sample
8766587ef0e1014d682275887387d9be_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8766587ef0e1014d682275887387d9be_JaffaCakes118
-
Size
457KB
-
MD5
8766587ef0e1014d682275887387d9be
-
SHA1
26303321378dc93f7f751d4cfc520cee66648bb9
-
SHA256
b4b3545b3dac157b608c1511155fa4e43da3cea2b4b053cdeca96cfa67ea14c9
-
SHA512
0505db07216f3331a8904bc87a23543f6de4bb25bc5d74ded2b47eedb39f266687702b2016cdb5bd13638c290f446bd9e01294c3875d075178859418b21d0482
-
SSDEEP
6144:TU3nDm64Tzf3z0qIOZNEhLat3vGhivTJ/kmp2zlV9:4CNf3zbI4w83vuivTJ8c2b9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8766587ef0e1014d682275887387d9be_JaffaCakes118
Files
-
8766587ef0e1014d682275887387d9be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE