Behavioral task
behavioral1
Sample
0f987d68ceddb472823239fea4c8cdc1_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0f987d68ceddb472823239fea4c8cdc1_JaffaCakes118
-
Size
784KB
-
MD5
0f987d68ceddb472823239fea4c8cdc1
-
SHA1
5565c1364759f12daf91065dabeded8db4de2501
-
SHA256
05964f9be2348f2bdc893d7fffba536db1e8fd7e4d4eb6caf432fc5db22ce32a
-
SHA512
5f82ee6160babcbe4df51bf21203fb49992121df7ed4520328f1fa47399edf1d67088a4599884dbb29840bfbb9fce8c386b3742b9cbd25ba6c7ba2865a43ac04
-
SSDEEP
24576:sT/pBjaWJ8hEOzkKyaN46+htf+YgsXAxZu1TEDY:szptu5kIktf+YgaAxSTED
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f987d68ceddb472823239fea4c8cdc1_JaffaCakes118
Files
-
0f987d68ceddb472823239fea4c8cdc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE