Behavioral task
behavioral1
Sample
8ae072a391d9535648d0059feb3c609e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8ae072a391d9535648d0059feb3c609e_JaffaCakes118
-
Size
1.8MB
-
MD5
8ae072a391d9535648d0059feb3c609e
-
SHA1
8d379304e2d9e55c85ddf8bac3059b1fabc0cf6e
-
SHA256
e0f99a00173344ab5cfeae8b99caa228ca918918f91f78d4c0744292ebc1f9e4
-
SHA512
2206cc4a58525345381d2fd0105f63d7026a200064a62c646d755e3d75b7d98852f9651a8fdd8b7dcdf60c76f786058cdf267e189260928708834687edec6080
-
SSDEEP
24576:SeT89y0U2J/7qgETSl+28/Vx7xkAGLWmkdKubqwttL6Jq4QWrc:pTSm2JDzETSl+5VtSA4bezb6q4tc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ae072a391d9535648d0059feb3c609e_JaffaCakes118
Files
-
8ae072a391d9535648d0059feb3c609e_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 998KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ