Behavioral task
behavioral1
Sample
8913bd08aef7def24adecb3f3c65f3c2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8913bd08aef7def24adecb3f3c65f3c2_JaffaCakes118
-
Size
274KB
-
MD5
8913bd08aef7def24adecb3f3c65f3c2
-
SHA1
13d6aa3fb9761a28b1acb7bc8706937965fa9f22
-
SHA256
bc44d9e5dff0cdb169ee29f4586c5e368ca207f217313f6b56973f667c4eef6e
-
SHA512
d95430eff6876a6781a956bcbb915acf86863dbceec3abd7fecf11a9995657a7dcfcd5592fdcbd05a74a2257f4ff1b93b6300903347b66bb64f9908f732b5564
-
SSDEEP
6144:j4d36yc2ay0pTb6z5iZ4u10SnmZsBK7X5KkmfZThe:jW36y3t0HZJ0SnmwK7X5KhfZT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8913bd08aef7def24adecb3f3c65f3c2_JaffaCakes118
Files
-
8913bd08aef7def24adecb3f3c65f3c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE