Behavioral task
behavioral1
Sample
04ea1811845bbf04b93058850da020b0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
04ea1811845bbf04b93058850da020b0_JaffaCakes118
-
Size
2.6MB
-
MD5
04ea1811845bbf04b93058850da020b0
-
SHA1
cd29452b2950aeb272164da1938014378878bdf7
-
SHA256
076d3950e13f204bdd02d2d69b85b54c096611f069a4fda725e91a0428d2bbc5
-
SHA512
9edf767451b3462926e0bbd286e534b8dbae46a6465f6d2161b3549669ad7f3fd3dbb59380f91407e97fe015a216c317f93e5adbdfe393d7143cb9e24ef9c5a8
-
SSDEEP
49152:soNc42Kh8QP+cIgl3WSIkeJocA7A02PAu+BDxZg0Txhay3:sNKhZIdnJ1VoDxZ13
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ea1811845bbf04b93058850da020b0_JaffaCakes118
Files
-
04ea1811845bbf04b93058850da020b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE