Behavioral task
behavioral1
Sample
8c0d110875833714ca8a8a9955438f78_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8c0d110875833714ca8a8a9955438f78_JaffaCakes118
-
Size
145KB
-
MD5
8c0d110875833714ca8a8a9955438f78
-
SHA1
341410b222dd925a71769f350b8cbe8e80fb925b
-
SHA256
4fb08647cff4f23f495a53f66e471b61eb7b67c642a354c3e3d4e2407e7efcd3
-
SHA512
e4662ace506b9d7ba49980a52ed9c012f26f1d16c07a0abbc5181220c36927f55bb4a4ea8f5bdf1255013e139c8f8b74817a9a385dcc3738960ac5840f45bc3b
-
SSDEEP
3072:9JHFwFRYcaJm+huUTfdPZhOMhAInQMF7DSmTWhlOwakebe:9x6DgzdP3OM/nTV+UWhlpakey
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c0d110875833714ca8a8a9955438f78_JaffaCakes118
Files
-
8c0d110875833714ca8a8a9955438f78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE