Behavioral task
behavioral1
Sample
093b9ed679125a8be0623382a268e4bd_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
093b9ed679125a8be0623382a268e4bd_JaffaCakes118
-
Size
6.8MB
-
MD5
093b9ed679125a8be0623382a268e4bd
-
SHA1
8c1ee4b2b4d5d44b43ed9cef30983cd6454ce587
-
SHA256
b0fbdbba38d274bb2c252ccbd08d8b93d7c5d36e600fe6cd93287d4b6ca843eb
-
SHA512
3bebff4c7256e443eff02a878ba04a18f959bb83030140272f43b2a3c7022e65d4028df258ece823874ffdd205acc50664a4440f7ec00eafb8d0fac971a40e58
-
SSDEEP
98304:5Cv2usaN3kLku/n3IMmThOwX47HNewzdIx3sA8bfIUSyNqb/Vc8s+Q:5CBsa6HIMmNTo7NegdIx3ZtUSyiVc8sL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 093b9ed679125a8be0623382a268e4bd_JaffaCakes118
Files
-
093b9ed679125a8be0623382a268e4bd_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE