Behavioral task
behavioral1
Sample
09188ad4a27b0729cbee56104fa91973_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
09188ad4a27b0729cbee56104fa91973_JaffaCakes118
-
Size
2.3MB
-
MD5
09188ad4a27b0729cbee56104fa91973
-
SHA1
fd4727c7e94f39d48eaec4cdbf4d1e7c2013640d
-
SHA256
a5b7f9d6a05e27b0f15d8586fccba0a540cc661b91773e845ff3e15e603efa78
-
SHA512
f510907c8d80c8ede9576a4495887735c02d2efb32b29fed28a19981705e0f518ab2293b2644c9bf8d0952e3d9f7cd8c0e85c297faa2a457fdc3801449a147d3
-
SSDEEP
49152:V2HbKTXu7b0ZBriw4iroDmjkgWoVm4LV9aNSBMnfJFM70DPHVQ:V3en0DriK0mjkgW9AuNSenfJg0bHC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09188ad4a27b0729cbee56104fa91973_JaffaCakes118
Files
-
09188ad4a27b0729cbee56104fa91973_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE