Behavioral task
behavioral1
Sample
0824215521144ffc7d582cb6d994f08d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0824215521144ffc7d582cb6d994f08d_JaffaCakes118
-
Size
1.3MB
-
MD5
0824215521144ffc7d582cb6d994f08d
-
SHA1
98a0425b3c983cc9dad0fc7f884e81a659b121d8
-
SHA256
1f1952538009a30e89750d9b7adffb770de75b22878207448ce9589d2c81d7d5
-
SHA512
05d3f9bc46e62933fc19c14440b3c838e77cff7bb9fd1a16932638db1b0e1f0b7b16774ee7d9624917d9b1af0ca2f90a8f4133d98c2e888723bf4e0efda7851b
-
SSDEEP
24576:UwESD9pb5SwaOrxzT/IWQS2jmHNtbvv5AAsUMX/nOSy0LKlWc:1DX5Sgrxv/kS0Ktb5AA5My0LKlp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0824215521144ffc7d582cb6d994f08d_JaffaCakes118
Files
-
0824215521144ffc7d582cb6d994f08d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE