Behavioral task
behavioral1
Sample
0847bbc77e716043bfa6f8091b49ea6a_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0847bbc77e716043bfa6f8091b49ea6a_JaffaCakes118
-
Size
784KB
-
MD5
0847bbc77e716043bfa6f8091b49ea6a
-
SHA1
9d0dfc126a540d57e5d63545342f07d9d1f0eae6
-
SHA256
39efc6a6eda20fb454b06c09d7d05565cff86e3b8bf5732f7924ef634d281a8d
-
SHA512
ebc204ce3ff6019db12baee090ab1825cf8837e5ed0f519d9a24c55601c0e52a6df5640aab659cbe3ebec0254c2bb7961c80accab5f6e11a9b4e09f2941bc56c
-
SSDEEP
24576:AmqJI1jgvJiJwgkix/w10YVptuPbV0gYrfn:AmqYgqwKx/tAptujV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0847bbc77e716043bfa6f8091b49ea6a_JaffaCakes118
Files
-
0847bbc77e716043bfa6f8091b49ea6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE