Behavioral task
behavioral1
Sample
a09a36a100b3dc40c77a532457af5897_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a09a36a100b3dc40c77a532457af5897_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a09a36a100b3dc40c77a532457af5897_JaffaCakes118
-
Size
328KB
-
MD5
a09a36a100b3dc40c77a532457af5897
-
SHA1
c83e1f1b2981e8fcf9d0d2ceaeef0a04bb805fea
-
SHA256
2fb467e7c0810da738b513a5793075ad03de912228d718ac4553f3c20a813bf4
-
SHA512
92567f45294675c2aca687c26bc9ff9caf8cbfa239fc22cb01f5d0c6ae1cb8e4f3773984957f0b7aa701c27695315861d90e03b4e059cc8dee2e4361c46585c1
-
SSDEEP
6144:9nNv4dmuZgEw5XEffylNDyHP6O2VXge72Yahz8duTGK0R7LR51wUj1:9nNpmgEw5XlDyHCO2ZaY8zkfR57dj1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a09a36a100b3dc40c77a532457af5897_JaffaCakes118
Files
-
a09a36a100b3dc40c77a532457af5897_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE