Behavioral task
behavioral1
Sample
11d7917938ac75b4e92f93c03fec9bdc_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
11d7917938ac75b4e92f93c03fec9bdc_JaffaCakes118
-
Size
4.7MB
-
MD5
11d7917938ac75b4e92f93c03fec9bdc
-
SHA1
88208cba48cb42bf71d9f0caa5547e538b325383
-
SHA256
772d8c159600698b319702e45240fdbeeee1ff10b9c0895aaaa586402ff18d30
-
SHA512
a566c74ba5fd2380ba48bdce8712345c101712cda1eb2c888bfb4c7ad40201b92e754994a19f9efb4d9bc6962401d0a3aac6199a514ef4d4e9a3eaff89e12008
-
SSDEEP
98304:YXfkMf4uBFeJ1QleIDHgbAfmQtPUpNCp5DORqMtaUljVUPXnCkyVtFN1M/:+vQuneJ1QLHavQSpNCPD8qMQUlq4tFN4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d7917938ac75b4e92f93c03fec9bdc_JaffaCakes118
Files
-
11d7917938ac75b4e92f93c03fec9bdc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE