Behavioral task
behavioral1
Sample
8aa6e505e3e40fc1122d7d7c2353d455_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8aa6e505e3e40fc1122d7d7c2353d455_JaffaCakes118
-
Size
263KB
-
MD5
8aa6e505e3e40fc1122d7d7c2353d455
-
SHA1
21b4d7283fc72a7e8e1243333e441cd2a1ffd5dd
-
SHA256
ddbe27ad8c307ca2eef548df86f103cdfb55d477bc5efe773a02893de8e3a907
-
SHA512
5432902fdf80a164274e6ca3abb2b6f14dfb6401398404eca1d0aeea6144ab201ad6dec8d1dcd2aaa3cdc7ee34f6422682b837c645ff13fc172f73100d6f55e4
-
SSDEEP
6144:wSSvrIdp6HBzxij5rmc7WF2kdshnKAW+Ic6dgY:9jpCBzxiVSclk+dac6d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8aa6e505e3e40fc1122d7d7c2353d455_JaffaCakes118
Files
-
8aa6e505e3e40fc1122d7d7c2353d455_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA