Behavioral task
behavioral1
Sample
09a1ab72a112f80da003e3cf34c8f6da_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
09a1ab72a112f80da003e3cf34c8f6da_JaffaCakes118
-
Size
325KB
-
MD5
09a1ab72a112f80da003e3cf34c8f6da
-
SHA1
f5f871faa07898b628dd0703e34e9a7ae35e1bc9
-
SHA256
06035436b5a5e8554c0f54ec7e805e9214f2eb25c671927f65b28dfc9fa965d3
-
SHA512
e17af1f6ba73ad4cfbd4f642d7a647a247239d8c09d48605a731ed52400ea7a00f9d5fcfabf34949d2db09ed4642d032b87d61049e777f8f92c154451cb6a20f
-
SSDEEP
6144:/ImrPdT3yAIzgeG76P8cFUZgH5q7G0sh1GPEYFgsJ+qgjBFFWJYoi0DoSmb:3r5lI0ps89uZKGwsjVzWWJOoSmb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a1ab72a112f80da003e3cf34c8f6da_JaffaCakes118
Files
-
09a1ab72a112f80da003e3cf34c8f6da_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE