Behavioral task
behavioral1
Sample
08634aef6695a92765a7a3444a633ec7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
08634aef6695a92765a7a3444a633ec7_JaffaCakes118
-
Size
27KB
-
MD5
08634aef6695a92765a7a3444a633ec7
-
SHA1
8f4a45937d2fc45a5eebd3258d966864eb86b768
-
SHA256
e67f638f109e0926cc5fca1231324c3684d78ecb17064a7d6b0b43fdf09b0b7d
-
SHA512
296cb6b8645dfa50c88a51131020576fa0b1bc3b72995881f514f12fa6889f0bbcdb93fc5e3f1f44e9cc62e657b12c9aedf29add83505da29760ba421e0c919f
-
SSDEEP
192:grKAbEfwqrwhhi6eg8lrVFXBPXW0Pv05Y2aWTMH+PRGsZwxfa+:g5ycfe7VlBPXW030i2aWTO+PR8fa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08634aef6695a92765a7a3444a633ec7_JaffaCakes118
Files
-
08634aef6695a92765a7a3444a633ec7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE