Behavioral task
behavioral1
Sample
07780939bb8ea9d1c9432ca433c88397_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
07780939bb8ea9d1c9432ca433c88397_JaffaCakes118
-
Size
939KB
-
MD5
07780939bb8ea9d1c9432ca433c88397
-
SHA1
48054ab5f84a0f233baaf230ccc3b2cadff25b06
-
SHA256
9c9b36411f70183e7a992dc564200d370ec5e131f6191ea54de050adbb0c031b
-
SHA512
a421a3f14040946decaa19d6f735bd3d813eb9e4a7fa08051f86c3920ed02cd1c250660f8ea48a299fc416acc64bfab36ac5ce26f990cdea590547f3c7f8e6d7
-
SSDEEP
24576:OlDULmlQE7/5Jbkw+l5xXC4ySVH+M2YS7:OlDUa2ErHP+l5x1ySEM2V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07780939bb8ea9d1c9432ca433c88397_JaffaCakes118
Files
-
07780939bb8ea9d1c9432ca433c88397_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 835KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE