Behavioral task
behavioral1
Sample
0dbe3bc3aa3efb9dace432e1d4824230_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0dbe3bc3aa3efb9dace432e1d4824230_JaffaCakes118
-
Size
3.1MB
-
MD5
0dbe3bc3aa3efb9dace432e1d4824230
-
SHA1
9a677f09db25a73e5c16836b9c3b07021059dc78
-
SHA256
4a57423c4c27fc74956332a537601130205bf315e65e6e1f89cfb54aaae1f2b1
-
SHA512
af0a1b1a36baa70b2c422a18751368b8403b545965b810167ab70658c0a5ff3a82d673dccf818def8be315f32ac9f5b610ae706e376ec95d1b459dbadce21dd2
-
SSDEEP
98304:UFlToE5MeXwx43B9cAK4hwUroghuAUBkVUCMA:Q/5Meg89cAK4CGFaOVU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dbe3bc3aa3efb9dace432e1d4824230_JaffaCakes118
Files
-
0dbe3bc3aa3efb9dace432e1d4824230_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE