Behavioral task
behavioral1
Sample
0be3a121bd4e30811d364e08a10cc579_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0be3a121bd4e30811d364e08a10cc579_JaffaCakes118
-
Size
784KB
-
MD5
0be3a121bd4e30811d364e08a10cc579
-
SHA1
7047ca1722e62321433d7746e0e894ce7f24ebfd
-
SHA256
837b42d65779b504cefc0d015213e86fae0ea7076ff95c29558f10f5e40ba018
-
SHA512
66d0b955c00ee7e7c303424e558fa9c25ac5839c7ae890c630471a85d2448ae790a3bd74b25f57cb06002cb99593f3fff46edea0987b7086dd40756bef6b1676
-
SSDEEP
12288:KBx3sRgSSHDLKFRVCgaP5mdTzYNJ6CWLO3ehW9G4BFSxioy15RPqBYwEsd7:Ux8RgSuDmTVo5WvLOOUPIiqZ1p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0be3a121bd4e30811d364e08a10cc579_JaffaCakes118
Files
-
0be3a121bd4e30811d364e08a10cc579_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE