Behavioral task
behavioral1
Sample
10019ddf4da1ef3a47eb6d3b9f8a8a79_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
10019ddf4da1ef3a47eb6d3b9f8a8a79_JaffaCakes118
-
Size
286KB
-
MD5
10019ddf4da1ef3a47eb6d3b9f8a8a79
-
SHA1
8ca2ea15dff9cdf911714bae66377217d7d921d0
-
SHA256
7fc3e9ebf9dc8fc6d0bc6dbe3f9ad2a0c0a2cab7ddaac11b9b22921371fc00d3
-
SHA512
144e1311a7487b6982061aff99a9bcaef6a7496fd0c0837fccd2305ace48873eec98aeee1527ad3f6f59a49a618c2884b5010d89c7d1f1e100aa0b12a40e0db4
-
SSDEEP
6144:BHKuYWO5gX1MNMp1QLNG/a3k5Bxd9pW04A/wOx+hpuCbA:Bg5+1Ms1Cki3+vpjl8hpuC8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10019ddf4da1ef3a47eb6d3b9f8a8a79_JaffaCakes118
Files
-
10019ddf4da1ef3a47eb6d3b9f8a8a79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE