Behavioral task
behavioral1
Sample
87993f2fa9213c7634da96ebbe135d98_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
87993f2fa9213c7634da96ebbe135d98_JaffaCakes118
-
Size
651KB
-
MD5
87993f2fa9213c7634da96ebbe135d98
-
SHA1
b57c8a2e3e4e415086d78c41035744d3ef927102
-
SHA256
c2a8bcff88e427162895ba6eada8f29d02e64623930f4205849283d74ae13deb
-
SHA512
34aa16954f30e7d52dd632fa00ac29e208d573eaa866883de4feb9b82a2ebbde74f40db5389364225ca6b990c418b037f77162c8491b26f69bc4e3e5e14ff55a
-
SSDEEP
12288:0LybQq0IdJK0vujGHQ/H+I746xzjS3cc0PfhEi8O/luMSkZKj95teOi5/:jKIOH+IUcjAh0PfhEid/bC9yJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87993f2fa9213c7634da96ebbe135d98_JaffaCakes118
Files
-
87993f2fa9213c7634da96ebbe135d98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 856KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 642KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE