Behavioral task
behavioral1
Sample
8e7f6a061f14320478cd32bb5a34df2e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8e7f6a061f14320478cd32bb5a34df2e_JaffaCakes118
-
Size
133KB
-
MD5
8e7f6a061f14320478cd32bb5a34df2e
-
SHA1
5d6e3e024845c138a3b7f9d65b7422451f7c6b09
-
SHA256
6132a28d17d3e8084a732de3414524f9e4196f5b33d053bdced20a5290624b01
-
SHA512
7c61817c91f6755b70edc31a01f2deec4093c0d6c008fe515036d4c27bcea5d63e8000e553520bb7f33e8163eb933b671523c4eeb0926077870895372c81766d
-
SSDEEP
3072:++NdSt4n+Fflx1DmqjF8BdohIqxO97vOLPPdQXOK2Q:hkt7Z1DmqjiBdMcELRK2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e7f6a061f14320478cd32bb5a34df2e_JaffaCakes118
Files
-
8e7f6a061f14320478cd32bb5a34df2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE