Behavioral task
behavioral1
Sample
8bff3599120bf2b2dc7ced708df08bd9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8bff3599120bf2b2dc7ced708df08bd9_JaffaCakes118
-
Size
386KB
-
MD5
8bff3599120bf2b2dc7ced708df08bd9
-
SHA1
5a903d4b0bc9ee16a159c5465a333f061e09b9fa
-
SHA256
bfab6d917bd7da8cc7e5cc22d4418943f946a2ba7fc7c0d3c1f085123c8494bd
-
SHA512
ecb0891b3bbaf1c77e5704d7d95fba909d37ab113b62113d79d89eef1dbc763862219fd01113953dfebaabeb3f8a653643c5cc08772fe9f3998ed2f61bee96b1
-
SSDEEP
6144:/hJhWT3UEIA1CqzU75aDdrTPbNZAXdPRh2IQLtL2yy02V3IGcIFoSe8OIs:/zhGqAQqzU7GrTzNZeNAl2yy9BoSZOIs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bff3599120bf2b2dc7ced708df08bd9_JaffaCakes118
Files
-
8bff3599120bf2b2dc7ced708df08bd9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE