Behavioral task
behavioral1
Sample
88ef2c7627b185b66a11978a9cde1c81_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
88ef2c7627b185b66a11978a9cde1c81_JaffaCakes118
-
Size
45KB
-
MD5
88ef2c7627b185b66a11978a9cde1c81
-
SHA1
d8cde09c87b65ed952897feaf103be1901b258e6
-
SHA256
4b53afe8e94f0372444a741d57495e6b31acfbaa130ef7634bf7bd19aed7556a
-
SHA512
f9d57a1258655298b812229c66de6f73c92f4d62e838f9a6ddb1f4c3a62de870949efeeb254bcc2a1064d93c711e527bb3e2178cfbfb378faff140f40643027e
-
SSDEEP
384:QMLjhovaVmzFLNDDBe9TLlb7Xdjjrns+8tvI40vTUmCu/8yF95ELK9GbLUJGM:QedoaELN/BGTLHjgLQ4rm7PF95HI0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88ef2c7627b185b66a11978a9cde1c81_JaffaCakes118
Files
-
88ef2c7627b185b66a11978a9cde1c81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE