Behavioral task
behavioral1
Sample
8b14f15eded14400da09005be25c13ae_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8b14f15eded14400da09005be25c13ae_JaffaCakes118
-
Size
286KB
-
MD5
8b14f15eded14400da09005be25c13ae
-
SHA1
6e346beacc5c37d60016c45f98499cf0258f7dea
-
SHA256
bdabb016db4e77f2f3ea22c26452c77373c4aa9429c8654c89e638b096c32d0b
-
SHA512
d3dff438052d89882a82af3e86f39b3b1344b8f8398846ed451bceefdd4732792397599a3303726050963d809469d807df2646158155f1389778dafa8220df46
-
SSDEEP
768:/mOhplcsHvKWzX6HJmFqda7koNUrnbcuyD7U/cTLdrX6zoYJNjYJ9+O:OOhplcsHv1X6n0Urnouy8BJWJgO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b14f15eded14400da09005be25c13ae_JaffaCakes118
Files
-
8b14f15eded14400da09005be25c13ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE