Behavioral task
behavioral1
Sample
8af28d890638870b377d90d0f325c489_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8af28d890638870b377d90d0f325c489_JaffaCakes118
-
Size
21KB
-
MD5
8af28d890638870b377d90d0f325c489
-
SHA1
581bbe897bf29b1a51545a345aa376f5f06fb520
-
SHA256
167fe108c75acc47d8255f9b0a69472f1e16d5e3484b8a5936ca00aadf23143f
-
SHA512
9eb1becc33f500cee9aef0fee17a7903599b98a178399fa469015de993f17a4f881b0a2d00056bc5572176575e4694774ec71123ec0e92664df3c3f62aba8b55
-
SSDEEP
384:E0/LxQ2KpRmPQKC8w0qwItUO3/3u6KpC3veTLIJYOlPVaNJawcudoD7UuLsr:E0IMPQKC8HqNUOve6KpC3veTLIKUPInd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af28d890638870b377d90d0f325c489_JaffaCakes118
Files
-
8af28d890638870b377d90d0f325c489_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE