Behavioral task
behavioral1
Sample
0a75288d97ab73232f08bdc6cac37680_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0a75288d97ab73232f08bdc6cac37680_JaffaCakes118
-
Size
3.1MB
-
MD5
0a75288d97ab73232f08bdc6cac37680
-
SHA1
4152355404133665ec3ffd2a9339e46e4db5c421
-
SHA256
641fdd3e02e7ae3616e37a9580db7c04a0a4c4cf72841cc20dc4863db28666f5
-
SHA512
601b92002d84f27707b7b7b8eb26fda4bf3432b9b7b877a8e195c596784b7fa9dbf6e3b26b3886f8a2d2bf25dadfe5da6b4bfb22c22b6d58a3ebea9b00f6063c
-
SSDEEP
98304:rBzekPGM7hr3KGKwWQASVymQifu3L8911HkWcg:rBzecRrPKpQAamif1EWn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a75288d97ab73232f08bdc6cac37680_JaffaCakes118
Files
-
0a75288d97ab73232f08bdc6cac37680_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE