Behavioral task
behavioral1
Sample
82cac1d9dc5059e35ef5948c9c7dbb57_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
82cac1d9dc5059e35ef5948c9c7dbb57_JaffaCakes118
-
Size
457KB
-
MD5
82cac1d9dc5059e35ef5948c9c7dbb57
-
SHA1
7b115892c13cb07f4bf22728dac85984d17941e8
-
SHA256
a491a110b41f13972d5da144c3ccfd6ddcf4b021e2c8887d6f79018edf10358f
-
SHA512
ced8bc593768867f3a7d88ebc416d0bb3041404bd3fba94535b65b87bb81bfb2dc8b833075b595a5c3140c2765f5b9ab998a4d176097bde5613a73fd32843d96
-
SSDEEP
6144:PYijXn9EHvuF7kTr0ZzzLLayfKGJ+bey7+d5JGmrpQsK3RD2u270jupCJsCxCV:DX9Wm1kH0RHLpis+ee+IZ2zkPaCxK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82cac1d9dc5059e35ef5948c9c7dbb57_JaffaCakes118
Files
-
82cac1d9dc5059e35ef5948c9c7dbb57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE