Behavioral task
behavioral1
Sample
8a957ddb0a4e2ebf127f76f2289addfa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8a957ddb0a4e2ebf127f76f2289addfa_JaffaCakes118
-
Size
134KB
-
MD5
8a957ddb0a4e2ebf127f76f2289addfa
-
SHA1
1bfc1edc3ab13a45e4f0d2891ddbbe3bb1f2dcf6
-
SHA256
97a235fc2fd1a05015bf609b94b9a8cd30334866fb827d5b2572e31b65e0a716
-
SHA512
eaa21a41ec5ac0c27ad8950edf59e5c716c2c3357b735783447cf5e3e7cb430e4d4f63d55fcd3b4e586fcf9775d9427b712b3a74b2cfe39af1250c5a285a4686
-
SSDEEP
3072:KZ/H5Psv8KPP5ll60WeaiRZRWPmJ/ds9ZhVt8yDt:yH5Psv5lE0JainkeJYZzBDt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a957ddb0a4e2ebf127f76f2289addfa_JaffaCakes118
Files
-
8a957ddb0a4e2ebf127f76f2289addfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE