Behavioral task
behavioral1
Sample
8d070fc710b0a306a67682f6e3dc8f52_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8d070fc710b0a306a67682f6e3dc8f52_JaffaCakes118
-
Size
834KB
-
MD5
8d070fc710b0a306a67682f6e3dc8f52
-
SHA1
82069e88261723f650f9481a72da457ff80b5fb1
-
SHA256
1b59f1fc23f4bba2a06556cf94a5f14c6ba682587ec2b6ae88d4c9b28fb9c484
-
SHA512
d22e87868c7996797aed9949ca0247b9878d1628e4bc6d63ffaaff2154cef64aa6542205657195e845c91cd42787a81850dfc510d95dafd91686fece627ec769
-
SSDEEP
24576:XAu64va63MKjL8iApCzct+LCgLBENh5dgl:hta637VctkCgLBENHSl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d070fc710b0a306a67682f6e3dc8f52_JaffaCakes118
Files
-
8d070fc710b0a306a67682f6e3dc8f52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE