Behavioral task
behavioral1
Sample
1109832d4375acc72b60203e6175ab9b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1109832d4375acc72b60203e6175ab9b_JaffaCakes118
-
Size
127KB
-
MD5
1109832d4375acc72b60203e6175ab9b
-
SHA1
47e0be23a8b4339dcd25e21eba14ddba7e8a4a94
-
SHA256
cf2ab9a6989a03bc49a71a739c2f20d595bf2946dd0d7bbf56a935dd3ab7f0bf
-
SHA512
159dc030a7cd8a95d28dc4d64250700e40c579e825a334adb79cf31fc3309f623050fa140789737570d46d920f40e2812cfefe780b56034ddff700ace77116a0
-
SSDEEP
3072:dN0LwH/hUmnWjcxRHLSOWulCVnnnnnnnVnnycd4C2C3:dNxPIOPlynnnnnnnVnnyTC53
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1109832d4375acc72b60203e6175ab9b_JaffaCakes118
Files
-
1109832d4375acc72b60203e6175ab9b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE