Behavioral task
behavioral1
Sample
8bdd1d57ae97ae4c3ad4cefa2ec4703b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8bdd1d57ae97ae4c3ad4cefa2ec4703b_JaffaCakes118
-
Size
133KB
-
MD5
8bdd1d57ae97ae4c3ad4cefa2ec4703b
-
SHA1
dd86b63efc73fcfb2ae05f5c1041116842b3f6e9
-
SHA256
23aacd7f27b1a8e05fe21924f1b467b21eb4f0db2ab38d242a9956141fe0afdb
-
SHA512
8bfbeee60f66e511f1e862498597030791eae398187d11b547c31ed1f1155153a7ccbcdb5a5cdb81ea245e9226d952992199a42f07ee159a735291dd298d8459
-
SSDEEP
3072:fdjSFuf4vdM8fggzOMWN3RKf8Nnzl3cCvA/VcydqUtPAKc1z4wvPQ:fy8SdzYhMWNBKfMnztI/poUxAK+4UPQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bdd1d57ae97ae4c3ad4cefa2ec4703b_JaffaCakes118
Files
-
8bdd1d57ae97ae4c3ad4cefa2ec4703b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE