Behavioral task
behavioral1
Sample
8c0be65277840f48e3b478e5b17efd46_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8c0be65277840f48e3b478e5b17efd46_JaffaCakes118
-
Size
784KB
-
MD5
8c0be65277840f48e3b478e5b17efd46
-
SHA1
86ec0f60536d8bc655fefb7ddb40f2be1bc004e7
-
SHA256
d563b43a64ae36947e9ec207169817e12c30243a2dc88bf1b86bd74e5e29e783
-
SHA512
e65190df46a7610ce5d3e1c71a3bfd3e43410407ad6f92f502c3616f7dce4f5b885bdcffe6c00bdc3e345c47c70ab82dd62fae9dec15ac9ceb6beabeba90a786
-
SSDEEP
12288:0NatfFtTxTPIf3dMSxH1xcuaRavJfzRvoGpmA47nqvHY2sI4JwLngtMi0w9/9v/Q:0NaxuftPxPGRapzSGReqx4JwLg/PExj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c0be65277840f48e3b478e5b17efd46_JaffaCakes118
Files
-
8c0be65277840f48e3b478e5b17efd46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE