Behavioral task
behavioral1
Sample
8b29451734b3ae921e1beb3b87733f25_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8b29451734b3ae921e1beb3b87733f25_JaffaCakes118
-
Size
168KB
-
MD5
8b29451734b3ae921e1beb3b87733f25
-
SHA1
d21e8f97aa5b2831fafc8e65d432dad2089516a7
-
SHA256
ce291702c443d0b9189971ff4ea7f208b054a17d0b7e6bcd6e93c6242c9957af
-
SHA512
71ba6a902418de2287364542e536576a3fe90327fbeab8f1d65508a93b08969762022feb63150ad216c026b5aaa0b3b5180efc126eac6b1a6094529ea9894c54
-
SSDEEP
3072:Y3fotZsOsWCwNPfrhM2RdO6+prsF7AsatIQeILcexL1gsiCRnIQiGc+pb8Gnj6rw:1gWCcnVMAQ6KseqQOexL7cQilkb5WH9m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b29451734b3ae921e1beb3b87733f25_JaffaCakes118
Files
-
8b29451734b3ae921e1beb3b87733f25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 860KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE