Behavioral task
behavioral1
Sample
8ec3a0f9d303126effdc06bfa587ec9b_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8ec3a0f9d303126effdc06bfa587ec9b_JaffaCakes118
-
Size
2.0MB
-
MD5
8ec3a0f9d303126effdc06bfa587ec9b
-
SHA1
32bf41c4eb661444d5085b2a8deed50d9389c14b
-
SHA256
67a1aaa61ae11769a07ab92ab2cf05f78f4b1b4bc98f3de34f7633fa3c52bb54
-
SHA512
5c194c1da9ad12eef113d3fab3ed60c25cbf99ae4e2975d34e26034b1e98d35f172e748d03edf5a5c1c7d2bbb3e4ad7c185553506533f3382040fb84644624ae
-
SSDEEP
1536:ed1p7I+qDnOXK5s7yzs3M9Mat0mT7HscZbbHZ5gXY7Hqh9AbJc4cayQ98xyQojIv:+x2zs76l1t0mfsGXAWqh9AbJc/TQNQd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ec3a0f9d303126effdc06bfa587ec9b_JaffaCakes118
Files
-
8ec3a0f9d303126effdc06bfa587ec9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE