Behavioral task
behavioral1
Sample
11ddb402adebc9cc5c08311121e14da0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
11ddb402adebc9cc5c08311121e14da0_JaffaCakes118
-
Size
161KB
-
MD5
11ddb402adebc9cc5c08311121e14da0
-
SHA1
6cbc3eae2540cd92426f1d12ffd1abc636f71e8e
-
SHA256
ae56f2928b7a1e1dc54f574238ceedf9a90d94442406547a040ce9b45f3996da
-
SHA512
9a57450f2829f862248e0514df788c91a4e0e3a49025249e9566f38a39e9c092fb6525d6b5f88149fabd3894d8b3eb857e5d13d76cb57fb1242b0685b3d5790c
-
SSDEEP
3072:B0fdMktSIfj36Wdqk1ZT5HZh8HW8JXrz7d7gZjDvC99CEIna3CVTLIcR/hBioutS:GPSI76QqONlZBcXrFgRw9NIvIc7woS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11ddb402adebc9cc5c08311121e14da0_JaffaCakes118
Files
-
11ddb402adebc9cc5c08311121e14da0_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE