Behavioral task
behavioral1
Sample
8cd97c5ae2a7626cc49bf99793ad4539_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8cd97c5ae2a7626cc49bf99793ad4539_JaffaCakes118
-
Size
1.5MB
-
MD5
8cd97c5ae2a7626cc49bf99793ad4539
-
SHA1
2f27ef36ce40dd83efcbb78cd7e0f886583bd34d
-
SHA256
466db5ece2adcb28e0287208f16471b009e0691a4100f45738316474cbbbfbff
-
SHA512
c449adda986d7e619624f84fe30b59e7fec5774dc3977a6e6598b243133da5d41d0d7141ddce4c3aa2238ef627423639df8b18173bec242da71b2c73c1ebefeb
-
SSDEEP
24576:W1Wi1DzlSNZ3iDZNWR3WxZChLNK/0836eEji:W1DZUv3WG/Kki
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cd97c5ae2a7626cc49bf99793ad4539_JaffaCakes118
Files
-
8cd97c5ae2a7626cc49bf99793ad4539_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 631KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE