Behavioral task
behavioral1
Sample
069795bdfc5442b1933ce5b6e9bb508e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
069795bdfc5442b1933ce5b6e9bb508e_JaffaCakes118
-
Size
195KB
-
MD5
069795bdfc5442b1933ce5b6e9bb508e
-
SHA1
28c8041e8d7eb821419d18b2f10d07ce050cd75e
-
SHA256
ec22ddf745d6cf371b2508a37e8eada0009cbfc920b4f9059b3e4811e9a3df9d
-
SHA512
1ce91abb5d8020912284ece40ef983bdff9513ceef7f2a085f1b9f457bdab68dada0901001d35762b56b2075b4a8de8430ea64160b02e07f8f7117e0dd81b0a3
-
SSDEEP
6144:/mqDThMqmQB7W5GIUAGtjbp0ZReOOkCfeKeZFV7DoS8:/mqXqQFSU6ZReOCGKWtoS8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069795bdfc5442b1933ce5b6e9bb508e_JaffaCakes118
Files
-
069795bdfc5442b1933ce5b6e9bb508e_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE