Behavioral task
behavioral1
Sample
0850153a3907f80c378dc0d27c6fa068_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0850153a3907f80c378dc0d27c6fa068_JaffaCakes118
-
Size
133KB
-
MD5
0850153a3907f80c378dc0d27c6fa068
-
SHA1
ddf70f0bc42bd79f6d630b12747875a53e7a0384
-
SHA256
c3b989b7083320c466cb88fda853e887ca7b7b54e928b5d80f1115b94bab4169
-
SHA512
63e962ce9a18f553d6f2b43829fcbe6d6c723068bfcee53982e16f8a2991ebe74ea4cca9c549cd6f9c7b9d697ee3e984dd636631c0c384c3e1e78d09b7ebe265
-
SSDEEP
3072:b/m2JOXSEprEJ7pSnpAvEoPatIEBY6rUaqmIKSQ:vUXzBqYnkEom9YaumzSQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0850153a3907f80c378dc0d27c6fa068_JaffaCakes118
Files
-
0850153a3907f80c378dc0d27c6fa068_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE