Behavioral task
behavioral1
Sample
8e4ad26da38cb47a49b11e2105ac8a3e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8e4ad26da38cb47a49b11e2105ac8a3e_JaffaCakes118
-
Size
112KB
-
MD5
8e4ad26da38cb47a49b11e2105ac8a3e
-
SHA1
43c8e809c880a2b3b353f4f56663a34d4de63783
-
SHA256
2ef4266e7fc0ee3d4bb466c5f126aba1bd2f3600be590d162f4c95a71c636600
-
SHA512
61a676cd21271e81a7a8c2d714577b3eeb0d5fc32cd4eaabf5614ab1219d78bf68ee31b682e977afa07f0e7dd7035e3d307b001a40f7333396e90ea91c869942
-
SSDEEP
768:K1NAUsbxtT6sFst/3IrdlLUwm7BLnbcuyD7UTwdEFHj0tUlBlBlBlBlBlBlBlBlk:K1NAUwtT6sFstwrbU5BLnouy8TFFQto
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e4ad26da38cb47a49b11e2105ac8a3e_JaffaCakes118
Files
-
8e4ad26da38cb47a49b11e2105ac8a3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE