Behavioral task
behavioral1
Sample
87abd486935ce5a10097723a98b59f02_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
87abd486935ce5a10097723a98b59f02_JaffaCakes118
-
Size
784KB
-
MD5
87abd486935ce5a10097723a98b59f02
-
SHA1
ce53c5a0983ca1d6afa6d3507d29b43be0720c44
-
SHA256
d4062146de6cb9fbc59145f9b19141388de2bd1ced93c44fa80a8c4d0641ed8e
-
SHA512
5184ee43d0359f6cdb17879869047c6f2b46f5fa61693762aa192a77ce4cc2b93ed8d719e9d5e032bf98ed9ce94f6106fcfb39faae4e19789ffb01c988a2205e
-
SSDEEP
24576:RL96FvU8PaUt9mpdpB6DRUVBqlND1Esv:FAFvpSUmfBeRKqltZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87abd486935ce5a10097723a98b59f02_JaffaCakes118
Files
-
87abd486935ce5a10097723a98b59f02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE