Behavioral task
behavioral1
Sample
10f1af8e33168a3004fe5c9c6ca9671a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
10f1af8e33168a3004fe5c9c6ca9671a_JaffaCakes118
-
Size
1.5MB
-
MD5
10f1af8e33168a3004fe5c9c6ca9671a
-
SHA1
6eb525a1a34b998c7a1fc612c023bc0380d4a002
-
SHA256
a01380c32368aea3c3f82177e1e9536aac2996e7046bb39c33ec1084506d5a96
-
SHA512
12634ade8162643b26f1f414ffb2a358b578221a6f07bcc96f7402e15ce7500a1f8d7cdd7faf85422d080023dea59c7d15769f29edd17358b26bfe5bfb0eef7f
-
SSDEEP
24576:FLVnCUccK2b2c5sScCRM2B4jERw0qv7WqKmsMtGgwV9CwPnuecPypZMI:FZCVScCyyjRBeW0wnH/TcqpZMI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10f1af8e33168a3004fe5c9c6ca9671a_JaffaCakes118
Files
-
10f1af8e33168a3004fe5c9c6ca9671a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE