Behavioral task
behavioral1
Sample
08149bd7390501fd00112c2d34bf515b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
08149bd7390501fd00112c2d34bf515b_JaffaCakes118
-
Size
284KB
-
MD5
08149bd7390501fd00112c2d34bf515b
-
SHA1
11d4c403ac7007d04d9d31beb27e06c06aaa6980
-
SHA256
75ad0e44522b54e685e5c55de79c867002d655458046e7998818a637e956a024
-
SHA512
001c1fa9e20f02bc329473db9575cfad47b6a8c9e6bcf6f0880d90b459dd4cbccdb51c1b5ee6f97eab9a3bf28211fb355cb5c6b4159f9f96e1267875ff0c572c
-
SSDEEP
6144:TnZgsPIE1XOhpLsMXWV07NA0FE+gDYDtWpkkckBsxe0ba+fIjt8kt:bGsPr1Xa42WgNUatWJYxa+wjuE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08149bd7390501fd00112c2d34bf515b_JaffaCakes118
Files
-
08149bd7390501fd00112c2d34bf515b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE