Behavioral task
behavioral1
Sample
090cc78eb7c28163e719d27df010c1cf_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
090cc78eb7c28163e719d27df010c1cf_JaffaCakes118
-
Size
784KB
-
MD5
090cc78eb7c28163e719d27df010c1cf
-
SHA1
e54e3816906b11716a32978cff34254b045e0475
-
SHA256
be0bf035e45c37b1ca756893e02d2a98dee023793334fcb667d08930148369ff
-
SHA512
06561ff76bdfdc39f9214a789720c7fb62688e38a9245c5d656185779fa4a5e94e23a78815fb31611478f95276ae8e874cff4a810bcf0f85a327f6a726a58f30
-
SSDEEP
24576:Mj94PiavbVoNTCNS+OGqZR0ulatXpYmRuf6rQ1XEGsV:u46/NTehqbwXppoyrQ6V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 090cc78eb7c28163e719d27df010c1cf_JaffaCakes118
Files
-
090cc78eb7c28163e719d27df010c1cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE