Behavioral task
behavioral1
Sample
8ac3183baaddbf522c21770b19ae656a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8ac3183baaddbf522c21770b19ae656a_JaffaCakes118
-
Size
446KB
-
MD5
8ac3183baaddbf522c21770b19ae656a
-
SHA1
e2261b5825293f28ef8b0ce447b1285ab83909a3
-
SHA256
bfc4c827196c02e40df4e7a7dd428463d34bf8ece4c3ed91fc02b4a2b523ec39
-
SHA512
6e164f0b2877ec990802e8ca43171565f7a0c7b13acd361acd3b543c5725149b1655aa53e5456323624a32b6092fd0e900d8549fcb05709ce3f80eb74f9a1bf2
-
SSDEEP
6144:21Fsamlp6zu+gCOkpVlD5zz7j9fgYOVdNrPXL5y4WaVzx1HYWac6Z9xOAh3CdciN:21FDE0l1v1fgYwNrPL5NzsTtn0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ac3183baaddbf522c21770b19ae656a_JaffaCakes118
Files
-
8ac3183baaddbf522c21770b19ae656a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 182KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE