Behavioral task
behavioral1
Sample
086a7747fb3d08aae0f2ab90ca31bfb5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
086a7747fb3d08aae0f2ab90ca31bfb5_JaffaCakes118
-
Size
1.1MB
-
MD5
086a7747fb3d08aae0f2ab90ca31bfb5
-
SHA1
2fd2beceb59be6b68c18d761e6e9571795632924
-
SHA256
544712e0f64d7bfbe52c430d96ed15d3d4e6a747ff237c945c0098f236138717
-
SHA512
a822e41d03dc42332501da5f2de9ae4bb26d6d23330962e58e9467849bdc71204e1d22f1215ca3b13a40feead890d86af3747cd7c0638614a866b5967e0a3dde
-
SSDEEP
24576:oecRePNNNGAEq0z2EW+4SNlLT7HBB+90GTZ/itNcRzMM2:CeHNGAEqDEW+4SNZ6yGTwNclMM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086a7747fb3d08aae0f2ab90ca31bfb5_JaffaCakes118
Files
-
086a7747fb3d08aae0f2ab90ca31bfb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE