Behavioral task
behavioral1
Sample
137b546a635095d88ba40c3fe9d4e9ea_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
137b546a635095d88ba40c3fe9d4e9ea_JaffaCakes118
-
Size
3.1MB
-
MD5
137b546a635095d88ba40c3fe9d4e9ea
-
SHA1
1464d3e8b13bf624c3939fa320a9f68c7622e14a
-
SHA256
d28759dc63af877449150e7f9f89434b6d4f8d391aba93851e4088ed8c3fb472
-
SHA512
b5afa03420a2364fa288ca7759e2443438db006b5dfaca3eadf77a56dd6f9b5f6e94ef501e94ea24c68aa0eba1f7380fbf707cad332bae8eea2c4ddc3ceb134d
-
SSDEEP
98304:8UjzPvByZPJZeH2QvEh9TXSc/LOOnoie8:vvBMvelMh95OOnxe8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 137b546a635095d88ba40c3fe9d4e9ea_JaffaCakes118
Files
-
137b546a635095d88ba40c3fe9d4e9ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE