Behavioral task
behavioral1
Sample
05baedbbfee0842b55135a3f96f8cd2e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
05baedbbfee0842b55135a3f96f8cd2e_JaffaCakes118
-
Size
784KB
-
MD5
05baedbbfee0842b55135a3f96f8cd2e
-
SHA1
379705b5a3dff299b9c35b3734b705adf95d58d7
-
SHA256
54a24bda8dabb74b77c24b1279d8b6fde220ba93dd0deeca088ab6a4427d0c68
-
SHA512
d86064e73c2b487ab75ba4ea6a71f784c021bd487473ed86a6eea9d71883e8af80ecfc9bb976df2d634ec55380a9710abdc0b93b2c9d8ee0c75a2f9903727765
-
SSDEEP
24576:G+IINR8OmwM7Eqp6KB+q0oUEUT2cp51Z7pWX:BIo8O/M7Eqp6KB+qhUEU/q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05baedbbfee0842b55135a3f96f8cd2e_JaffaCakes118
Files
-
05baedbbfee0842b55135a3f96f8cd2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE