Behavioral task
behavioral1
Sample
8e7b0713308401f9727cab0c8bdfd7e6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8e7b0713308401f9727cab0c8bdfd7e6_JaffaCakes118
-
Size
61KB
-
MD5
8e7b0713308401f9727cab0c8bdfd7e6
-
SHA1
a2054e2760efe971e48ba4c6ba114a9ddede675d
-
SHA256
17f0cb130224e28e4a718bc80329f6b48e420b994ee713299f74ce5d9bee706a
-
SHA512
3adc4e864d0b7b98c9b1cd9167561dc5345344ea4c3bf48a1387aa977fd9b3297c616827c818754cd5bcf3bf57759af82727c238080c037bcb0b0d926d735b82
-
SSDEEP
768:pn6zelkQj4JBrBTeZJR6M9Qe+1REOt6EO3Fr87BHa/R2/GhVRjFxvnNpmgVgs:Qzel/pJR/9jdOtxO3FA70vVRj3vnN3g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e7b0713308401f9727cab0c8bdfd7e6_JaffaCakes118
Files
-
8e7b0713308401f9727cab0c8bdfd7e6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE