Behavioral task
behavioral1
Sample
8eec89fcbce53b348a1cd2bd5d662b7b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8eec89fcbce53b348a1cd2bd5d662b7b_JaffaCakes118
-
Size
1.1MB
-
MD5
8eec89fcbce53b348a1cd2bd5d662b7b
-
SHA1
1b8d8993953222f07f82e9bff87c3bd95832814a
-
SHA256
d65825ffd1a0e7dc0fe60c28add6a63d7bcf7c8a2a945a697bf6ab0c1de43b45
-
SHA512
283a37722862744212ec436d420ea3443249a0ad5ad65136fce947db3c3f314c3890f5efed05c9c021a5450a34c6f592ecf1287b4c96842d36f66d4ff4908579
-
SSDEEP
12288:OHbaIotF0skIgfXvahWxXa7RzL8n6k15HiNWsr8wTyNn37qZbaN4oS:Y+3F0s2/WWufl65HiE+bTyN2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eec89fcbce53b348a1cd2bd5d662b7b_JaffaCakes118
Files
-
8eec89fcbce53b348a1cd2bd5d662b7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 732KB - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE