Behavioral task
behavioral1
Sample
8dbb84654bded736a11caf224584ac36_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8dbb84654bded736a11caf224584ac36_JaffaCakes118
-
Size
428KB
-
MD5
8dbb84654bded736a11caf224584ac36
-
SHA1
d56a0203161518f223c67c512c95e6f45ff450ea
-
SHA256
b1503608ce54da7afcf04e20608b31abc6b322e9dec61035773e3e5b2544ce19
-
SHA512
92e85486a8ef2c5fe1cc15417f1fce1731e4931e032faab5209849999d73d1d6654e8ba254bbb88b30a0c753286b06c31b32d2d7914ae398757e8a6163393858
-
SSDEEP
6144:S8GC/jCEM4t0n8J3IhoIEuOpZP8cgv0RVHScKf1/hl+7KVenp/rf5ZXV:P02IhoL3sc8Hf1Aqet75R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dbb84654bded736a11caf224584ac36_JaffaCakes118
Files
-
8dbb84654bded736a11caf224584ac36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE