Behavioral task
behavioral1
Sample
11f8a14bd82d3de3366a4fc3d6fa23a8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
11f8a14bd82d3de3366a4fc3d6fa23a8_JaffaCakes118
-
Size
131KB
-
MD5
11f8a14bd82d3de3366a4fc3d6fa23a8
-
SHA1
99df02c9c15b322576a98e6f11798d5377c6a342
-
SHA256
5993e6caf0c66ddacc730c2640f0f9ad7785cd7ed092c182e1e46ead33eb4007
-
SHA512
6a05004cd5c9efffe7d8559ebbc0a31d86192353427115e03418b771642c79d904578041d9641b2a8368fb42977432d996b3a81d66e4450a4a5a871e6e77360f
-
SSDEEP
3072:in/CIzAFf/HnGLZc2ZWy68ImGr2ne3o256q/c/A/mc:kzABPnGLZcQWDhmOoHH/v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11f8a14bd82d3de3366a4fc3d6fa23a8_JaffaCakes118
Files
-
11f8a14bd82d3de3366a4fc3d6fa23a8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE