Behavioral task
behavioral1
Sample
07a7545ed39445bed81cb5c7e1ac59af_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
07a7545ed39445bed81cb5c7e1ac59af_JaffaCakes118
-
Size
201KB
-
MD5
07a7545ed39445bed81cb5c7e1ac59af
-
SHA1
c4a381d35c5b8751eb315b934bb60ef9a3923eb6
-
SHA256
7318712028050cc3f4c559846700ac92eab0812db6be9ee92bcea3839b67934d
-
SHA512
1b4b23c81dc8839ab80c5c8cdb0b3b711f815f23cf2c7444de85d87b3a64d06508b1e3d67199436e977e32058d35d42940258a42067bb76fedb2c47a1c0533ba
-
SSDEEP
3072:H4CkUjWtv+MAM0D4FIIUc2BfY6bjJv2+gnI03e1JiinWeYy0PjpwN0/uK1E6h/7d:YCbitvA8lUcv6Jvr03OWAgCC7RSVVoSk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07a7545ed39445bed81cb5c7e1ac59af_JaffaCakes118
Files
-
07a7545ed39445bed81cb5c7e1ac59af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE