Behavioral task
behavioral1
Sample
8b762e68f7c07a78c05be5274c2703fa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8b762e68f7c07a78c05be5274c2703fa_JaffaCakes118
-
Size
25KB
-
MD5
8b762e68f7c07a78c05be5274c2703fa
-
SHA1
ec31fd7aa5b275428da85ead98c557e071a7d3e6
-
SHA256
c2bdab22aa0f469b530e15c16516f80973905ab9ae133acfac8ddb3f8d34c18b
-
SHA512
4439605850d60c7c4c493f3b793869b76691f7c2370f71613a4bca4d9cdb3ea827aab437451692d4e6c3f19dddf7358cff7e23f3f135a6a87714a4afcdd878ab
-
SSDEEP
384:kXqpzcX+XqpzcXMVUbTAtkV8jwClHEdMI/1MLeuYakZewsd9Gj3T5:cEzKOEzKMOTqkOMkfLM9eb+j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b762e68f7c07a78c05be5274c2703fa_JaffaCakes118
Files
-
8b762e68f7c07a78c05be5274c2703fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE