Behavioral task
behavioral1
Sample
09fd99bc5674e3e0f6afc4d33d624274_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
09fd99bc5674e3e0f6afc4d33d624274_JaffaCakes118
-
Size
400KB
-
MD5
09fd99bc5674e3e0f6afc4d33d624274
-
SHA1
bfb890ce49e21c903746374c4933ff21ecfa43a8
-
SHA256
0904b616d4cc2ca5aa189ab243db95c4b47e90bd2d4cefc924a7aaea53e55b56
-
SHA512
5f1de061c2de348c5934f786ccc8c7394dd32ed4f8b86c7af45ac6f381afdc9d0134efd4c6f3cb75b6ee90c40f46e2fdb589ed4c0e3a7fe80e6bf1b8dad547a6
-
SSDEEP
12288:ulghoSqDNJ/Jj06KjHnTc8Xduckb7j91anXyGt:Ug2DNb06CXSb7dI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09fd99bc5674e3e0f6afc4d33d624274_JaffaCakes118
Files
-
09fd99bc5674e3e0f6afc4d33d624274_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE