Behavioral task
behavioral1
Sample
8ecb76e2aa764207e884d3738d042077_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8ecb76e2aa764207e884d3738d042077_JaffaCakes118
-
Size
95KB
-
MD5
8ecb76e2aa764207e884d3738d042077
-
SHA1
588ab55a1f7a38c2833793e326471514e7c4eb23
-
SHA256
3be422be61bc06d314ae3086c7bd1e66cb784d9e6cbba2302c6c8fdc8bc41d57
-
SHA512
6cd284cbfc6616a85a946b94d22500301c2fc3502aac77495adc81a0bfe2fcc253a530443261a1b0063b9ed899e093e66ce7ab88cf2ca636658c553c666c5bfd
-
SSDEEP
1536:ddEh2lojcTR2ODBS6aX4tBWev473vXaxHBeZzdy5JCHz4/OMucwKk2y6zEvFMFo0:doQojcTR2O9S6m4tBWevY3lZoJCEUcci
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ecb76e2aa764207e884d3738d042077_JaffaCakes118
Files
-
8ecb76e2aa764207e884d3738d042077_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE