Behavioral task
behavioral1
Sample
8d2135f18eab11b107950a2cfc6b852d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8d2135f18eab11b107950a2cfc6b852d_JaffaCakes118
-
Size
10KB
-
MD5
8d2135f18eab11b107950a2cfc6b852d
-
SHA1
acba2ada746099c7e2f6632e70259b3cb5203e5f
-
SHA256
960d521a1e5a55a6a4f5fc324d69d33c43a7edf08efb4c1c8722edc1440b115b
-
SHA512
3f406bbbe552723f3481f3e4f1e9b11cbb624b415e7e0e62381eff8c629d17f75609caead3be238095a1b164e4532be152ad0f39fd3f2514f5ae4584a1f401ce
-
SSDEEP
192:GDQ0qTyxGFcXtugRC5zn8+Z6BPJx+TRd33l5yalFaNJhLkwcud2DH9VwGfctLHM:MQ0qTyxSCUJoY3l51aNJawcudoD7Um
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d2135f18eab11b107950a2cfc6b852d_JaffaCakes118
Files
-
8d2135f18eab11b107950a2cfc6b852d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE