Behavioral task
behavioral1
Sample
88e0d33982fcd8604dc79793d1232649_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
88e0d33982fcd8604dc79793d1232649_JaffaCakes118
-
Size
138KB
-
MD5
88e0d33982fcd8604dc79793d1232649
-
SHA1
9497df04618479cbe76323237885c5fcff3b7d33
-
SHA256
2b505a7c75e6c79e02c3a8b9ea68160847f6807f3ae88184ce8b3b9111f99500
-
SHA512
3f05fb5e11a7747583b265ca32d53e52f6cdade082a25b589d143654cb9bd86ce96e5a2fb4425ddbd3a39b709d4dc7c8878ed66f98e6998b8b9dc72a39bb16d8
-
SSDEEP
3072:TH0k12wKY9azM9w6j8054HEBI/zDGOJAgyVfBsout5:TH6wKY9azM9w6QTzaVqoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88e0d33982fcd8604dc79793d1232649_JaffaCakes118
Files
-
88e0d33982fcd8604dc79793d1232649_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE