Behavioral task
behavioral1
Sample
02450bcaf9c680b858c2f00239bdad4d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
02450bcaf9c680b858c2f00239bdad4d_JaffaCakes118
-
Size
104KB
-
MD5
02450bcaf9c680b858c2f00239bdad4d
-
SHA1
da44d38f411cca17955d8d2679b8d57b27ab63de
-
SHA256
06bfd28073b6091180e1ebe2b1632209339a18a39abc8e997ce759ab774e8c2e
-
SHA512
e6f037c977a077b2487efc80f0d7f11d7e80e357920ccf927d715de8531b6a7d95e21328a50523930a2a7a14b5f435574dcf8340d4c2a5470f41e50ace2f10bb
-
SSDEEP
3072:rIdIH+T6Oa/9bBwND4Pz6Fsq4z+I72X1cbRuFdoutX:rmda/fwuSl4itaAoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02450bcaf9c680b858c2f00239bdad4d_JaffaCakes118
Files
-
02450bcaf9c680b858c2f00239bdad4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE