Behavioral task
behavioral1
Sample
02a98b92d5827c2b27d2f5e0c3d7422a_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
02a98b92d5827c2b27d2f5e0c3d7422a_JaffaCakes118
-
Size
5.7MB
-
MD5
02a98b92d5827c2b27d2f5e0c3d7422a
-
SHA1
6ecf3d089bda0a9b168f3a8fa9f782d1fd67e502
-
SHA256
98c99bc79acfad3e75ef8307ce42e2d0ef09de8bd82009215550aaae984c1e27
-
SHA512
b4db3d9de24c4d14fbbc91ea8c6a8ae1f725d149cc17bfef190326bdf216eab3299e93bbc286e649cda122e82b2507fcbb54f20d5446669a95f945ff42ebf4e7
-
SSDEEP
98304:XAEe6gZaY57jzaOkW/7UQ2VprDdSFlmXCkBmfMtOlThkY:QE3qaY5TUW92VWFEXC6mUQThX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a98b92d5827c2b27d2f5e0c3d7422a_JaffaCakes118
Files
-
02a98b92d5827c2b27d2f5e0c3d7422a_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE