Behavioral task
behavioral1
Sample
0793b60f7c457d082ce6a05a29cd1a5e_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0793b60f7c457d082ce6a05a29cd1a5e_JaffaCakes118
-
Size
784KB
-
MD5
0793b60f7c457d082ce6a05a29cd1a5e
-
SHA1
520582cb22e46967f0d16bab89bdd256eb768aa7
-
SHA256
dea83661bce324df2a02b5b1ff8910c7fe370c4b08b7a8f70e279faa99e9057b
-
SHA512
35b71d74ebf3aa0246f28c0add552c6c1228dae5f1c2402abbc35ed31ef8fe642f210e01c236c163d495c4c9202fddbc9f7b47114d365be1569563f3c17e3dac
-
SSDEEP
24576:oqbCdaiS+QrLXYx+9rA05XaKorTc3fA4O:oYCdaV+QrLXYx+9AGy0D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0793b60f7c457d082ce6a05a29cd1a5e_JaffaCakes118
Files
-
0793b60f7c457d082ce6a05a29cd1a5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE