Behavioral task
behavioral1
Sample
08ba32e6897a93974114bf7e39c24434_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
08ba32e6897a93974114bf7e39c24434_JaffaCakes118
-
Size
784KB
-
MD5
08ba32e6897a93974114bf7e39c24434
-
SHA1
f9210b73fb25c676a2a66dab5303d4ddb61d1465
-
SHA256
49e2728a4087cb9f7ed45d09adf6e5e98694372ca48fb83b58779a7e101b19a4
-
SHA512
e014b70599928334aab98b21c187c70dd7ae1df6cde29ac8d562478e555084401e1e22a832b844c4e749b12b3a8e248bdeaf0f9dfb3ff9e7864a4043752b370e
-
SSDEEP
24576:ewXpTqClp+8AaoUYbpDHnAX9SGxdJfDpZ:JXJRl6aSHnAt/J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08ba32e6897a93974114bf7e39c24434_JaffaCakes118
Files
-
08ba32e6897a93974114bf7e39c24434_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE