Behavioral task
behavioral1
Sample
0116d25eab650e39c4c927de07a16609_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0116d25eab650e39c4c927de07a16609_JaffaCakes118
-
Size
2.9MB
-
MD5
0116d25eab650e39c4c927de07a16609
-
SHA1
96cb136f204fec295db497f96b3b095be59611a6
-
SHA256
05060cdcad2f842845a3d91e9284760475ebd7cd081214c58c991c8ef55bdcde
-
SHA512
ce6f2f11404247cbd4ce3472850155874b2d7886092b8303b67131332729aa3ceb5e4d4bde63355a0dafab69f1396d0de8b76cca823b32dba0723f248348b322
-
SSDEEP
49152:PXc4fLV1J/VwD/9fCruUpCH9HNJjJ+WJitN74NH5HUyNRcUsCVOzetdZJ:PXbfx/yD/9ayJ+WJit4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0116d25eab650e39c4c927de07a16609_JaffaCakes118
Files
-
0116d25eab650e39c4c927de07a16609_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE