Behavioral task
behavioral1
Sample
09a5a03efcc83b7d54f19dc731d68b2f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
09a5a03efcc83b7d54f19dc731d68b2f_JaffaCakes118
-
Size
3.9MB
-
MD5
09a5a03efcc83b7d54f19dc731d68b2f
-
SHA1
342af2f9648ed7cacae3e9dc34a8c70e877d3c56
-
SHA256
e8df2c685d788bb7ace8a28bda4835c86947a87b0bde4d5aeb22937f0d23f823
-
SHA512
209a46c993957ee55b52154d22eb8b00be9ffe78c081e72a453ee89e7bd1dc3097a346c20d0c1385f974856f3860d8e9f824cf99ddcba5459e8ea28b5a0fccb3
-
SSDEEP
98304:tZfkfc58Qn53yD2i7D3xkOxYwpKeLA83D2i7D3xkOxYwpKEKVIPehohPX5SD2i7:tZM0C65ih7FkNqKekah7FkNqKEOkSh7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a5a03efcc83b7d54f19dc731d68b2f_JaffaCakes118
Files
-
09a5a03efcc83b7d54f19dc731d68b2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE