Behavioral task
behavioral1
Sample
8e8c8e5bc06ddf08537d044ea2035b02_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8e8c8e5bc06ddf08537d044ea2035b02_JaffaCakes118
-
Size
56KB
-
MD5
8e8c8e5bc06ddf08537d044ea2035b02
-
SHA1
bd2d951c70d25f748d00b3ebed3de6617ce5ce40
-
SHA256
b5fca80a22aef0dee9562785e0fc504324cd01b53525aa76ce728de84686a36f
-
SHA512
b2c797fbb91884f38e2a047729c66ed3fd1215a82cd99d3034593ceca59a5d66e1e24658296c39b13227bb8594dff90615aab1cc3c8306758f6ef3357d4a32d2
-
SSDEEP
1536:f9h8g0fApCRTpPXtS0xesJqOsZCuhToZN:f92apCI0xzJq/ZCu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e8c8e5bc06ddf08537d044ea2035b02_JaffaCakes118
Files
-
8e8c8e5bc06ddf08537d044ea2035b02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE