Behavioral task
behavioral1
Sample
8b1d8edb375c78717c224b9efa086a20_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8b1d8edb375c78717c224b9efa086a20_JaffaCakes118
-
Size
784KB
-
MD5
8b1d8edb375c78717c224b9efa086a20
-
SHA1
d73386a28d73dac2075661fee62c568168df432c
-
SHA256
739320cb56f8f9c843148cd0e51227c4c9f62c277e76a61918d0bbe2d082ab5e
-
SHA512
89e4da6517bcb64e51d2db75324615586fa46ae18f076362aaf426963bf137deeba1ff41475b98a6ee71217250a34b34f656a08b1787bd4a6e1627840479a22b
-
SSDEEP
12288:ySjfjIL/otXPTWkdnJyC5NbnNdIAgkGwqES9bO3v0ra+kt53V/k45MEdf:K/2TPeC5N7nnXqE50RkHfMs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b1d8edb375c78717c224b9efa086a20_JaffaCakes118
Files
-
8b1d8edb375c78717c224b9efa086a20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE