Behavioral task
behavioral1
Sample
148e11f675d4ef55327f2c11c1b552fd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
148e11f675d4ef55327f2c11c1b552fd_JaffaCakes118
-
Size
133KB
-
MD5
148e11f675d4ef55327f2c11c1b552fd
-
SHA1
97c2a6dc102ac20b314b63e7068f9df3f1e0ef32
-
SHA256
d1f637c279f8d8824318535bc8079f73b1f15a355145609c29b814856c781f99
-
SHA512
5e6e803be2c1e2a30d1abae7ded647bb3c49c678687c01a7a405c5fe3e3efb528880da09c13d20b9e1090dc0abc5fe4e91ffa057929da808b7fd4b86c2e18abd
-
SSDEEP
3072:XBCG820cW1pt5utimXhYTzP1X1a+ODtRYUrKQ:XVXtCXMXhMDPqDtRMQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 148e11f675d4ef55327f2c11c1b552fd_JaffaCakes118
Files
-
148e11f675d4ef55327f2c11c1b552fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE