Behavioral task
behavioral1
Sample
f97e3b107fc4e6dd616b01a270572e99_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f97e3b107fc4e6dd616b01a270572e99_JaffaCakes118
-
Size
306KB
-
MD5
f97e3b107fc4e6dd616b01a270572e99
-
SHA1
58df4465b75a68d4278b994a93d66e80db514afe
-
SHA256
1acacf75a8ca50bdba3b3ec76ca73e7ffa7279517684c6393858d52deb13f1ae
-
SHA512
c6e14b9046f0226bb935c9379bc399bc481f7c404cb44361fcc022772c262ebadfdbfbc7ac1d14e8496a1a5468d69f046dc62de2dbc4d3bd864008525fcb2476
-
SSDEEP
6144:zoq1fT6NilJdqegW5bOUC9Ty+PWKxiWSbF/moS:zJt64lv3L4ZWtWSbFeoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f97e3b107fc4e6dd616b01a270572e99_JaffaCakes118
Files
-
f97e3b107fc4e6dd616b01a270572e99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 636KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE