Behavioral task
behavioral1
Sample
8aed4c396550111bad0af51c2cf9e433_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8aed4c396550111bad0af51c2cf9e433_JaffaCakes118
-
Size
784KB
-
MD5
8aed4c396550111bad0af51c2cf9e433
-
SHA1
241be97d0e32c2aae80a1f4082e9a4f337ce6c55
-
SHA256
d0b433eca51c4ffbf027ebea51602e78a58502eb5300984c3588480894c83db0
-
SHA512
5019c610f0cb0979023a5a1ee8ed180c6a4eef703446c8632e7117ec48687ab238c45501122acc5c298fb0fa914af110134deb07eda815cf3b69a616e201ff55
-
SSDEEP
24576:7u3SL0D191l41k8Ee9FEFR8+iE0raJMbO:CCQR91c0hkPC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8aed4c396550111bad0af51c2cf9e433_JaffaCakes118
Files
-
8aed4c396550111bad0af51c2cf9e433_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE