Behavioral task
behavioral1
Sample
0365ea3ca5117dea604a05ab3d44563c_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0365ea3ca5117dea604a05ab3d44563c_JaffaCakes118
-
Size
61KB
-
MD5
0365ea3ca5117dea604a05ab3d44563c
-
SHA1
04e641bbbb8bec6605b57e14f47c4be16f765875
-
SHA256
0d93ac9400e7d73fc1917e459488a44715f90951c518c7f10493d6c941711f5d
-
SHA512
7f13ae0b77b528362a24e32d4435c01baf61e21c18d1c81525d3b3b4025e3eb7323c97f544b955014e1e48613e7bd365229b91d580388e56545ab563b2acaab0
-
SSDEEP
1536:+NXGeC2gEMpIuWv+VHj+1a8SE4OBHGaxDDsP6wMMVNvgNAhRr6Rz:v/lK2VDmasJGaxUy/MANAX6Rz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0365ea3ca5117dea604a05ab3d44563c_JaffaCakes118
Files
-
0365ea3ca5117dea604a05ab3d44563c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE