Behavioral task
behavioral1
Sample
09a2b99f38f5741f5cdf8e72f5f6e24a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
09a2b99f38f5741f5cdf8e72f5f6e24a_JaffaCakes118
-
Size
2.6MB
-
MD5
09a2b99f38f5741f5cdf8e72f5f6e24a
-
SHA1
f7bf4e9d1073c77e51201e0d541fe3985ccb7efa
-
SHA256
dd898b882b35187fb700463a0d8443394db6fe95132438c40e138fcb798ef694
-
SHA512
cde18ab7436f70aa63eeaf1a096e839a38a07f1098df43c65ba3eefa5c4b5e5a685a15341806aa97ac1d42404284cba24d7f63ede3b672a2877ff2ffce96f9e5
-
SSDEEP
49152:nbP9StTVoUaTwlwpY6hiG+Jtb/HpcSvSo2lyK6Hr6qeQay3:bPwi+nHKSpLL6qeI3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a2b99f38f5741f5cdf8e72f5f6e24a_JaffaCakes118
Files
-
09a2b99f38f5741f5cdf8e72f5f6e24a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE