Behavioral task
behavioral1
Sample
08683a72b64a4803fa9ed1c80d136df3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
08683a72b64a4803fa9ed1c80d136df3_JaffaCakes118
-
Size
123KB
-
MD5
08683a72b64a4803fa9ed1c80d136df3
-
SHA1
037f7da5915767f606f06839a8db27344c5280ad
-
SHA256
bf584d368562ffe594118f5f2c846ecc78454084b3767761403a392960e85d92
-
SHA512
c0b7910d11096b64d7dc2ced741bca7db9d3502770fe034c61f526331424f839fc43251d5c5cd063ecd0bbeabcfabd092b999e3be45d8b2d9bbe50c1ac113886
-
SSDEEP
3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLvn4OHDU:OVYrJrOSsRwcpJlQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08683a72b64a4803fa9ed1c80d136df3_JaffaCakes118
Files
-
08683a72b64a4803fa9ed1c80d136df3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ