Behavioral task
behavioral1
Sample
8e4c7b273a834880cb380e2976c30b13_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8e4c7b273a834880cb380e2976c30b13_JaffaCakes118
-
Size
784KB
-
MD5
8e4c7b273a834880cb380e2976c30b13
-
SHA1
0c7ea86f8eb301d143e45d7f73d758c791700df9
-
SHA256
39a81e39ba91a1456dc821ade678f2630f975620bb0737c1bbe17c3428eb8344
-
SHA512
f9d238a34ac2d1961611e5ce7e5fbb7496fca327065dd1beb0b2b18bbca72f28c86f85bf2c6e71e02e2e6f8b2af64f656d722b4c90dc652e942d21c1e8c38db2
-
SSDEEP
24576:fo5HJp29895K9pOvABjq/JS5vna0nnDfZB1wpV:A5HL4E5U4AY/JSRn9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e4c7b273a834880cb380e2976c30b13_JaffaCakes118
Files
-
8e4c7b273a834880cb380e2976c30b13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE