Behavioral task
behavioral1
Sample
8d30a306cdd9b82e27364c00f4e0e087_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8d30a306cdd9b82e27364c00f4e0e087_JaffaCakes118
-
Size
35KB
-
MD5
8d30a306cdd9b82e27364c00f4e0e087
-
SHA1
5f6946bfcfc272e00ed5cad4693fd71340f79d84
-
SHA256
4581df9fd8316664bd931134663aab83d6b7278aff6e10a30bd8d2b51b4fe1c9
-
SHA512
69bb6822c80486fd59082ee79a5a504140183166ab0e0f074cbb59b7bcc18d64d145938cf58b454123fd40a2b182834acda52637035a49d78cc253f7cd1a91f9
-
SSDEEP
768:c1NAUsbxtT6sFst/3IrdlLUw7SYQx++nbcuyD7UKDb58:c1NAUwtT6sFstwrbU8cx1nouy8Ki
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d30a306cdd9b82e27364c00f4e0e087_JaffaCakes118
Files
-
8d30a306cdd9b82e27364c00f4e0e087_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE