Behavioral task
behavioral1
Sample
8e00d031cdb937c7a04fb27ceca8f109_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8e00d031cdb937c7a04fb27ceca8f109_JaffaCakes118
-
Size
404KB
-
MD5
8e00d031cdb937c7a04fb27ceca8f109
-
SHA1
fa195a7af482ea458a632b50fa0c4f4ceea95d80
-
SHA256
19e94aad366eb13e4e281f18a4ccd7f97cd7607f9ca586540b09e39b7e9397a3
-
SHA512
48342f5378c8dc48b8a1820b476fb536d71a3d43b68328461f1d56726ca98af8e9cdc366f36fe8b93a5f385e4a6288f247c328851c744b29df7f5107c4fd3336
-
SSDEEP
6144:RKaNIvPshFmbWWLQCALLOCrbq/eKaNIvPshA+fFR0BijXGM79/TxNEVwHlFXI:b204WWsP3eM20/fYBijXTxuV+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e00d031cdb937c7a04fb27ceca8f109_JaffaCakes118
Files
-
8e00d031cdb937c7a04fb27ceca8f109_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
UPX1 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.importz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE