Behavioral task
behavioral1
Sample
8c356ec06bc940f3b68948217b112339_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8c356ec06bc940f3b68948217b112339_JaffaCakes118
-
Size
275KB
-
MD5
8c356ec06bc940f3b68948217b112339
-
SHA1
a0e6794f02d5bdfd5b0e5135be34bad8e4820114
-
SHA256
f583ed46e2a75b81e5846a1ee563a134a2b4dae240595a675cd6b98979b8ffed
-
SHA512
a4a69a5c964621defae832904fc903cccac69fe7c3f17f68a83191fb6bdaf290325d42a8271b176a1d80a21acedd39b0b47daf414cb28b9989d4a800ca6ed46b
-
SSDEEP
3072:pUgSBaHDb2BfmXvgR2MpYXEtveEdBs7bPjUwjQWu/WvJuoBSgCVP/cDxDX3ku3fg:HwajbyrXfdO7kNWugPLu/KnVCTZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c356ec06bc940f3b68948217b112339_JaffaCakes118
Files
-
8c356ec06bc940f3b68948217b112339_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE