Behavioral task
behavioral1
Sample
8b81c4746689b95cb37e5050ea1e8f49_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8b81c4746689b95cb37e5050ea1e8f49_JaffaCakes118
-
Size
784KB
-
MD5
8b81c4746689b95cb37e5050ea1e8f49
-
SHA1
f4dda9859c3102f831ddd396f1f8cc9a995b8fb2
-
SHA256
aa484c37d9d40611931bc5f01280e629512ce05ffb1eadee1f7ccab5ae7c9c64
-
SHA512
4dfe23c6c39157b488ee41875e1d5a1687b797edead6a61bdbe2b2ad266dfffc4b97ac8df9040df780d51e4218d16ac8781a52b5505b5cf7090d9aec49c5478c
-
SSDEEP
24576:AEh3r/ZKr6/B50unmkjT2GwG6ZQ0MAp+uLo1:rF/Qr6///nmA2GGeAY+o1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b81c4746689b95cb37e5050ea1e8f49_JaffaCakes118
Files
-
8b81c4746689b95cb37e5050ea1e8f49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE