Behavioral task
behavioral1
Sample
8bc547ab33b3410a50dd94ed0cfdd900_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8bc547ab33b3410a50dd94ed0cfdd900_JaffaCakes118
-
Size
169KB
-
MD5
8bc547ab33b3410a50dd94ed0cfdd900
-
SHA1
a2735aef36230e9bf443a691c22354b364cff846
-
SHA256
5228cc5225c08ef24db327548516fd28d33c8008c752ed614ccec32f080faf8a
-
SHA512
48c4bf1a08e0829c0c204c0d7576df8f20204f6c3e563d3423894bdaa1d3c06e8bfb246e352b2b60487306912e96794ac59053216852ebe4f82856edd74d8822
-
SSDEEP
3072:pYgAt7ebW78cseKIMLIbxtAJ2qzz9jUg27BRgQvnfL+sFaGRcXl:pYg47e0MFYYh4g27BRgA/dU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bc547ab33b3410a50dd94ed0cfdd900_JaffaCakes118
Files
-
8bc547ab33b3410a50dd94ed0cfdd900_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE