Behavioral task
behavioral1
Sample
8c141baa1180dbb6aeb9f61a6ccf1001_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8c141baa1180dbb6aeb9f61a6ccf1001_JaffaCakes118
-
Size
121KB
-
MD5
8c141baa1180dbb6aeb9f61a6ccf1001
-
SHA1
1a1900c4d54eda6f4363d24ce1c330c25be34cd8
-
SHA256
f0c2b7cb9cf07f279e9879dcf3f11349524bf1e49b8695a1eced0c0bc16e9225
-
SHA512
a3a05706f2dd8fdc094b69fec678eb39831eb47f0a0da362317ce6a4e31592403dab84aff7596cf5834929c13978398b819519250758a78046444ea776f6db59
-
SSDEEP
1536:pKmcCnpdcpxM5DYKs4hao7axiyMvce7s6JyBeY3Q6JKJ6fx3bewmpDilrU7tUdTk:Zc0LcpGpYONuevceY62DK2khr7tUd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c141baa1180dbb6aeb9f61a6ccf1001_JaffaCakes118
Files
-
8c141baa1180dbb6aeb9f61a6ccf1001_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE