Behavioral task
behavioral1
Sample
11258150f5a0d9c9bf4d41502f46c0d8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
11258150f5a0d9c9bf4d41502f46c0d8_JaffaCakes118
-
Size
111KB
-
MD5
11258150f5a0d9c9bf4d41502f46c0d8
-
SHA1
e7dbac81a716bd6ba4df1e7752eac12b4bc8ed3c
-
SHA256
fc6936ff1bb0e22d8562bcbb0ce16872bc51039ef855ca93352d8544f191f472
-
SHA512
d30f3275f3f1e8135058b8595b53ed9a6806fc56adefcee06b71d5a39e053b52b573a6b0023820e116af59a349d3fe0f45943b438f5448e1e0ab412598b702a7
-
SSDEEP
3072:u1xMJKrUnFYY5z1i0Nmbi5fJBNPhkout:vIrPj0NmWtNyoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11258150f5a0d9c9bf4d41502f46c0d8_JaffaCakes118
Files
-
11258150f5a0d9c9bf4d41502f46c0d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE