Behavioral task
behavioral1
Sample
0946baef4fb43513cc253a65a8119a9e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0946baef4fb43513cc253a65a8119a9e_JaffaCakes118
-
Size
784KB
-
MD5
0946baef4fb43513cc253a65a8119a9e
-
SHA1
075a2194069e8b0af14be1a9496ff69745ea9d7b
-
SHA256
230c7cceb2f758211b8620c63c2ef350c1b5f546f71cca534b3ed6045361b3d4
-
SHA512
b09c987e33bb5322f423eafc57833896560932a6e628351396e75fbbf239a4df0267a64409f46db7bc00db3632b607e009d28034f66443e612c98cdb9c6cbec3
-
SSDEEP
24576:52U/etGk2hD+jzmuklmMKnVuXChFDpJEvk:52U/UG7hD+jzVe0gi1K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0946baef4fb43513cc253a65a8119a9e_JaffaCakes118
Files
-
0946baef4fb43513cc253a65a8119a9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE