Behavioral task
behavioral1
Sample
8987be4f2e2f11d6f680c36aef61b26d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8987be4f2e2f11d6f680c36aef61b26d_JaffaCakes118
-
Size
62KB
-
MD5
8987be4f2e2f11d6f680c36aef61b26d
-
SHA1
5844895e6d2b86bc01940d19e6fb3f636bd58b18
-
SHA256
41be9fa9d3667e5ab0ac20c692b20d837a0eebcc2d687cc6779946a709db6f08
-
SHA512
eb448a4315eb09966e751f3fcd874c2161a0867c7eb62b3bf8ca9b9cf260858cd9cc9208d6c99a7973587294dc893c4136eedf37d950772a719fb4ce2c8dc63b
-
SSDEEP
768:pPf/7N2uUwPsUOUkOwxkgemZ/M/wuXlpv5XFc8dfc:pPf/xswUUOUlwrU/v2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8987be4f2e2f11d6f680c36aef61b26d_JaffaCakes118
Files
-
8987be4f2e2f11d6f680c36aef61b26d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE