Behavioral task
behavioral1
Sample
8b583c7a09f99c0bb147b2d1453b1cf7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8b583c7a09f99c0bb147b2d1453b1cf7_JaffaCakes118
-
Size
143KB
-
MD5
8b583c7a09f99c0bb147b2d1453b1cf7
-
SHA1
65d93a418428eb32f4bbc7c02959f7ce1dfb81fd
-
SHA256
3ecfc7f7b8ba55cc9b805424c36ddb710c2a4437fa8399ce81c4d30623a512ae
-
SHA512
18ac7d7b035e4508a5077dd0ba1692239fc6f3c4afcf71ff966148c33ced9db598e9720938d8a1044cad49143e3e315516703b7443cc326173ad84240254f73f
-
SSDEEP
3072:3WNSP/uUdzh5vaBAzmeu2ZN/L/4OhIAsdxn6sM0TZMl9V:GNSnuUdzh5vaBAz5Nr7hIAsdxn6sM0Tc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b583c7a09f99c0bb147b2d1453b1cf7_JaffaCakes118
Files
-
8b583c7a09f99c0bb147b2d1453b1cf7_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE