Behavioral task
behavioral1
Sample
08126151391c8522c655a48a40e6671b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
08126151391c8522c655a48a40e6671b_JaffaCakes118
-
Size
480KB
-
MD5
08126151391c8522c655a48a40e6671b
-
SHA1
a0475d9e7c181efab0939a94867cad9790ef2071
-
SHA256
88af2a8f8b6769cc84ed4905dfb6e4470fa5477256a6dea587bff8fe65959187
-
SHA512
2406f3bd3f31a53e242639b3e3bf4062479fdff98a603338cbd3c4d433c32b44ac1da890d19d2de9723988c49bbb6056f899834086b6c0c233475c4a15b4fc82
-
SSDEEP
6144:IuPumU3dXqoU1ln79KTM6KY8kGND1uK1GBMlw6PtlITrsEG0AOiSkjIwjIHyTbbg:IGWa98axkq1J1GBM7ITgVNVkWJ5gD94q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08126151391c8522c655a48a40e6671b_JaffaCakes118
Files
-
08126151391c8522c655a48a40e6671b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 391KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE