Behavioral task
behavioral1
Sample
0098b381c043c9ec7c18499d903636b5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0098b381c043c9ec7c18499d903636b5_JaffaCakes118
-
Size
784KB
-
MD5
0098b381c043c9ec7c18499d903636b5
-
SHA1
6115e344b873e8653aec6ad950a1c640e7d856a6
-
SHA256
d74e631d8564f6fbb5b9d301d0845a547b1d6081bd3e33c5329bc02d8e14a4dc
-
SHA512
fa01826a10db91e20499aff0b0daa173300eb389eb3985489d9a75fea9c360cbafa98e0cd2c2cb531aab07278357e47b8b303bc4a16d76caeae828690b00b7e7
-
SSDEEP
12288:0NatfFtTxTPIf3dMSxH1xcuaRavJfzRvoGpmA47nqvHY2sI4JwLngtMi0w9/9v/Q:0NaxuftPxPGRapzSGReqx4JwLg/PExj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0098b381c043c9ec7c18499d903636b5_JaffaCakes118
Files
-
0098b381c043c9ec7c18499d903636b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE