Behavioral task
behavioral1
Sample
03b6a04e010b81e3661732fb1ed0a83c_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
03b6a04e010b81e3661732fb1ed0a83c_JaffaCakes118
-
Size
4.7MB
-
MD5
03b6a04e010b81e3661732fb1ed0a83c
-
SHA1
bf7a6c1ff375e797f6d4e6095e72650874b2054f
-
SHA256
9791cf5070736c25ccc7f6967a1ac5abd6a22ef5c2a341b98a8346171fc08236
-
SHA512
4202ab7f64d936a4b6141e2feeb649d9ac5fff65cc1b9486598d9ea80baa8ad371f1db841c86d4769d0cb84e1dd229449eec7817105e7081a59b2275e48d7cbd
-
SSDEEP
98304:Tl88udp4A2evUNGnVuUwGLVWy0/OQmjmUah6rpHDY:yzDiNyiXfGDvi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03b6a04e010b81e3661732fb1ed0a83c_JaffaCakes118
Files
-
03b6a04e010b81e3661732fb1ed0a83c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE