Behavioral task
behavioral1
Sample
099b1522fce20627bc9ac63afe4047e9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
099b1522fce20627bc9ac63afe4047e9_JaffaCakes118
-
Size
303KB
-
MD5
099b1522fce20627bc9ac63afe4047e9
-
SHA1
ca393711a2af2c5ae3556f4da93c7dda813baecb
-
SHA256
ca66eeb86be0a4e24b4832a63b9f7a3a23d10862002e3def50d67de90c54633f
-
SHA512
c3ad27aefec66e831804adba045609d2bf3a4669f9abc2bf9038dcca27637ae1a58bb2dd50a36cfaebc79881f2c0e59c61773fc22a41288ca3885b40ea9d1525
-
SSDEEP
6144:3dUBAJ2NnpqH7xJoxETpueh+4aFagYF9EzqdWxNCjz9v+:uBAJcWxJoxMuxs0qdWOjJ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 099b1522fce20627bc9ac63afe4047e9_JaffaCakes118
Files
-
099b1522fce20627bc9ac63afe4047e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.new Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE