Behavioral task
behavioral1
Sample
8e9d106e075f4aa009fdf48ed34ff689_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8e9d106e075f4aa009fdf48ed34ff689_JaffaCakes118
-
Size
21KB
-
MD5
8e9d106e075f4aa009fdf48ed34ff689
-
SHA1
de1b6995e01bc33f3daf5afaa5a50c3615873b82
-
SHA256
5688ec281b69cef6ae6b8a97094be25b1a137510856b0a6287706a96b9c8a3dd
-
SHA512
5a3a11b58579a7a047e668ab9a1f61d949cf0551834410dfa990c185e3f00f8e50c0abc644d55372010361ea180ceff8a23bf005c4ec76423fe0b20f3ba7a83d
-
SSDEEP
384:hIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZYVH1aNJawcum:hRGuY2P0Vo6r7SiAwyrMRjb+VHonbcum
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e9d106e075f4aa009fdf48ed34ff689_JaffaCakes118
Files
-
8e9d106e075f4aa009fdf48ed34ff689_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE