Behavioral task
behavioral1
Sample
8e4ffccebaba74dbd2e06f15d00346e6_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8e4ffccebaba74dbd2e06f15d00346e6_JaffaCakes118
-
Size
784KB
-
MD5
8e4ffccebaba74dbd2e06f15d00346e6
-
SHA1
8e99c2df7f6adf58de0c35f3260b8540b4dcea30
-
SHA256
165876c0b880cbcafd63be0c382f329921449c66e7c65681a113969cad7c456d
-
SHA512
ce3b7159c318dd75721e72df9febe169f553e0100b3764def45afab1de7da55922819f5201b8ac49c240a26b65854aa1f7db24de7568347df7bcc25749ee9bfc
-
SSDEEP
12288:olIH64M4VvTTj0M64Xznz1aW/m8a8QOMNKCmAPZsDtk4yUqCzQ+8g3:olIH6LmXX64Dpd+8a3JKC7ZsDwUqut3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e4ffccebaba74dbd2e06f15d00346e6_JaffaCakes118
Files
-
8e4ffccebaba74dbd2e06f15d00346e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE