Behavioral task
behavioral1
Sample
8e545be0551bbe3e31ae6a2f61e0981b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8e545be0551bbe3e31ae6a2f61e0981b_JaffaCakes118
-
Size
784KB
-
MD5
8e545be0551bbe3e31ae6a2f61e0981b
-
SHA1
9795fd49507cb50104c94a7e1a76cbd0423ddd22
-
SHA256
fba14614b3f1a6d1a3c98134d7aa22736ee5c069ab1985b7cc24cd6c7c44cb96
-
SHA512
baa3d60a7d50545017db63dad2f5a92dca0f1923efb1e4bf00f37590e33aecb09f8413b646cfb680433519ff5bcce16f6be03e1cff51e070cac0475e5960ce20
-
SSDEEP
12288:na55D4yOvcNuCFqW+8S61WH1IOWwikrZ2yiekQ/QeTAhvL+PHiqPUVDdnv:nGx45saT6U7ikf/nXTANS6qqDd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e545be0551bbe3e31ae6a2f61e0981b_JaffaCakes118
Files
-
8e545be0551bbe3e31ae6a2f61e0981b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE