Behavioral task
behavioral1
Sample
0747108b93257a028f155ef7d18d3981_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0747108b93257a028f155ef7d18d3981_JaffaCakes118
-
Size
1.3MB
-
MD5
0747108b93257a028f155ef7d18d3981
-
SHA1
3dbb5329020d271b7373e29c3407d07da9c5941b
-
SHA256
f3a18da30f63eab3b6ac3533064a2e23cab19221924ea6f66df8a216b8ed0ece
-
SHA512
f919ab3f4c46c16bb8c75d436fc8a37c1f580fe9c620f26574995e4f75d191d5a8afb65545759a9045058b59726a5a60c31425736eb61d04f829a41b6ebee50f
-
SSDEEP
24576:uB4KLdvt/zKHT7+78rrFOYixwotFmDt+tXWfxGsLUYO/oYwIKvG:uB4KBAHTq2rFOb/FMt+tG3A/oYx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0747108b93257a028f155ef7d18d3981_JaffaCakes118
Files
-
0747108b93257a028f155ef7d18d3981_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE