Behavioral task
behavioral1
Sample
8985e38e157eab4e5efcbb5558d19344_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8985e38e157eab4e5efcbb5558d19344_JaffaCakes118
-
Size
237KB
-
MD5
8985e38e157eab4e5efcbb5558d19344
-
SHA1
b96dea915ab2ee1e28ef0c56932aad0657460a8e
-
SHA256
48de3e037b6403d2b5dc4916d2de63ff3299bd7fced84b2101354fdf4db558b7
-
SHA512
d1eaa5a3adcb68917a82b22f778a9b778f415586fc97c57d51336fb389b845a915e85602327cab7e31921d816477b15f924968bbd5311829f4d0dd2a92044871
-
SSDEEP
3072:GMm2IYONYSe3hLIpFkCzncJGOQQWXtXL7VL1RNntiugv+LlUczdEHBKl6epsobP/:GMmCONdI6znSQQWnV4uga2sEhixxV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8985e38e157eab4e5efcbb5558d19344_JaffaCakes118
Files
-
8985e38e157eab4e5efcbb5558d19344_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE