Behavioral task
behavioral1
Sample
8e99759f1f4e91c4d15bff76f6aaae0f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8e99759f1f4e91c4d15bff76f6aaae0f_JaffaCakes118
-
Size
1.8MB
-
MD5
8e99759f1f4e91c4d15bff76f6aaae0f
-
SHA1
5668e12eaad44d7659c25e42893c6d6eb2aaadde
-
SHA256
875328991f7f6e17f8c9de8e0916a85f8a2e31540d66ddd9bbc8f1e037eb1cad
-
SHA512
4929802349e73945fdc18dc7d7cca2fc788acafb2ad2da2a304596d911accbf7ed77d9a9aab7e05f45d8e6c665a79502d0013fc14e66512eb3977cc20302d0cb
-
SSDEEP
24576:vDAMb5n9Rx5yp9TQr6QFGUFSW+GnO4GkOuVIsWCRTM7Dl4OyUcSaqA1O:vDNl9tuwx+GnHGkOuVI4R/7qZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e99759f1f4e91c4d15bff76f6aaae0f_JaffaCakes118
Files
-
8e99759f1f4e91c4d15bff76f6aaae0f_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 998KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ