Behavioral task
behavioral1
Sample
02bc58cfd3995a58b25c1342f32f1a31_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
02bc58cfd3995a58b25c1342f32f1a31_JaffaCakes118
-
Size
325KB
-
MD5
02bc58cfd3995a58b25c1342f32f1a31
-
SHA1
bdc0ed2e18e8be704c79fc870dd33787e937104d
-
SHA256
cf68207837537316fdacf0e923b1d6c9bbbe512a6a56beefa4fe26c78cde8533
-
SHA512
4432faf4e987a7135ef434bc8d7906fad999e595ba480b4b6ac40ce83d78c80b5f271cd417ba712d7e30c66b6bae8ed91e09d49b22796029ba38e27b93f8c628
-
SSDEEP
6144:/ImrPdT3yAIzgeG76P8cFUZgH5q7G0sh1GPEYFgsJ+qgjBFFWJYoi0DoSyb:3r5lI0ps89uZKGwsjVzWWJOoSyb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02bc58cfd3995a58b25c1342f32f1a31_JaffaCakes118
Files
-
02bc58cfd3995a58b25c1342f32f1a31_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE