Behavioral task
behavioral1
Sample
0485fa9a8ef095ed9e3f177d96a4ac58_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
0485fa9a8ef095ed9e3f177d96a4ac58_JaffaCakes118
-
Size
56KB
-
MD5
0485fa9a8ef095ed9e3f177d96a4ac58
-
SHA1
06803b627f9da6b49b575d47192dbb3383647fdb
-
SHA256
a7350de7458acc1475e7cbce6e9aa933f9cb13e63958161955c834639103a1af
-
SHA512
6eeb6ca502628fcb61cb80a493f7a74e89d7fc54634b9dcb83a6e6430dbdc8bb4c26beb36e3b141fcff928f0d6ec606648cc7004b9809cc361895d4437948a86
-
SSDEEP
1536:TvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPAl:ThOmTsF93UYfwC6GIoutiTm5E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0485fa9a8ef095ed9e3f177d96a4ac58_JaffaCakes118
Files
-
0485fa9a8ef095ed9e3f177d96a4ac58_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE