Behavioral task
behavioral1
Sample
8c0afbce25372a92ec7e97aec884b55a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8c0afbce25372a92ec7e97aec884b55a_JaffaCakes118
-
Size
516KB
-
MD5
8c0afbce25372a92ec7e97aec884b55a
-
SHA1
75d50fcca19f372d2cceb137399b829fb79fb7da
-
SHA256
280933c44a4ae7c1060c29bd3b8806b749c11f94378e2d6891800b857f3f1124
-
SHA512
05ebf70b711b0d9493c85b0d7e595cd5562228ef6fb452a8ae2f3581c1b644fe91b908a9fd364bff3919dbe43ec35d382b48dac3b3c60ec1efadd97b0a185e00
-
SSDEEP
6144:lQV4lKVFIW2trGZhzgKm+60If81RBVjS3D/N/4/jPSb:l6MMIWT7zg5+XXwTNEPSb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c0afbce25372a92ec7e97aec884b55a_JaffaCakes118
Files
-
8c0afbce25372a92ec7e97aec884b55a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE