Behavioral task
behavioral1
Sample
8c909735e0c78d22ded88307ef53c0de_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8c909735e0c78d22ded88307ef53c0de_JaffaCakes118
-
Size
175KB
-
MD5
8c909735e0c78d22ded88307ef53c0de
-
SHA1
b60f910b721ec57e6223e5018a2ff052cb1b6f6a
-
SHA256
c7540ae41c6e91836c595524828328d0f585e102c14c111d6cd47d2769b005ed
-
SHA512
91075ed34511de108870c105e3180785aea8713c5e03d79abd1e079324156e926ff07712a9d52ea782db58cf0fd4ec6732f2953af913f27b7c0557c02527739b
-
SSDEEP
3072:MgKqchMiBeu/Wa/4D4ecxZP1J//M7eGMiXNCgAOxuiIRn5hn34xQXMm6Ip:RKqcOeeu/Wa/Zxvh/MCiYXTFn734EMYp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c909735e0c78d22ded88307ef53c0de_JaffaCakes118
Files
-
8c909735e0c78d22ded88307ef53c0de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE