Behavioral task
behavioral1
Sample
8e0c5166824fd0bf21574ded41804b51_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8e0c5166824fd0bf21574ded41804b51_JaffaCakes118
-
Size
784KB
-
MD5
8e0c5166824fd0bf21574ded41804b51
-
SHA1
cedd2d4b47268f440af2fc92948bd2a356d09075
-
SHA256
f54a10df5ad845df6bbf881473534a7916a007cd47d430ee6da9bffe8e4b1e50
-
SHA512
9c1825da8596db2cd064ff1e864867615641bd8b1a9d685124a5a8b2c1eb231c1c81da40625365cdfcf3c329e25228210b4ce42adbcaf0ed89bd9b82437494f4
-
SSDEEP
24576:RmXUMurMJMLaMwoo9b1iT/RHZoQP8Y2E8hMwbBA:aGaMwoo9bAjR5oQP8YDG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e0c5166824fd0bf21574ded41804b51_JaffaCakes118
Files
-
8e0c5166824fd0bf21574ded41804b51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE