Behavioral task
behavioral1
Sample
8916b5e181437cc222e0f1e4d0658fb0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8916b5e181437cc222e0f1e4d0658fb0_JaffaCakes118
-
Size
137KB
-
MD5
8916b5e181437cc222e0f1e4d0658fb0
-
SHA1
b1f51a3b086106772fed24d643b63497195672ae
-
SHA256
a43a97aaa343f8e7ddbf0005111bf6293cd391408f6b6d215498b1014bbd8ac5
-
SHA512
20f409b9d504bbd599d2b534affbc59302365ca7e58d60f8e2966f64be02e1b59baa0a34235df3a1f27a8a4abde745b1070d72e21a562952329bf0e510cbb5d3
-
SSDEEP
3072:Hu+AGXouzvKLvmY3NmPFq9jA2LTeOMazWTRwudXKNw3DAloutP:Hu+LXzgmwN0FqjAkebR98a3DKoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8916b5e181437cc222e0f1e4d0658fb0_JaffaCakes118
Files
-
8916b5e181437cc222e0f1e4d0658fb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE