Behavioral task
behavioral1
Sample
0897e1be00bdabbc519ce301a2197781_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
0897e1be00bdabbc519ce301a2197781_JaffaCakes118
-
Size
1.3MB
-
MD5
0897e1be00bdabbc519ce301a2197781
-
SHA1
ba9d2cf179d26e66ca8e495a1cb09ad802518a68
-
SHA256
b529a6476a3d8f98c1f7e6a1abece0770a5c21f1aedc77f5e8bdd6ca32a43280
-
SHA512
fc48bd07c86f6045c3ceacaa884eb284c202ad7981b6a3c764f0e13bf55d63ee24472f1e6ede7d25ce0d7560eba5333c87bf51c085cc4c322669c190f873289b
-
SSDEEP
24576:VWMWPmq011srX9JZfZVSSMcZSVFmzx3gRb6higQlHQWc:I0fSffZVSSXIVFmzx3wwp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0897e1be00bdabbc519ce301a2197781_JaffaCakes118
Files
-
0897e1be00bdabbc519ce301a2197781_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE