Behavioral task
behavioral1
Sample
8cb9a89839c0dbe2f2ea15da438fe7e7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8cb9a89839c0dbe2f2ea15da438fe7e7_JaffaCakes118
-
Size
1.7MB
-
MD5
8cb9a89839c0dbe2f2ea15da438fe7e7
-
SHA1
fa96bbdb341234e27c75543f13f6fb9632462639
-
SHA256
752c94404be9f1ace916d36b03d5765ef7042014e2597848c746c61ff2b10c40
-
SHA512
e0dc9f5a75fc2d6a273dc496191c30899033f65075b5136d01810ad79b92bbcd4765d6da39ef23b898df78c45f7b6e8360045e1c22f0dffb54e74e3fee306b78
-
SSDEEP
24576:Gi699tIHxcsGua+UAFzx9S+4cQZE12Xp5C2ebKfqcarOWSaoDtxCNBfV86krM:cnuHxc6a+UA3l4c+Rp5BljwOW1NBWDM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb9a89839c0dbe2f2ea15da438fe7e7_JaffaCakes118
Files
-
8cb9a89839c0dbe2f2ea15da438fe7e7_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 983KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ