Behavioral task
behavioral1
Sample
0c2b5bfd162078edb82fdca013b7f6a9_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0c2b5bfd162078edb82fdca013b7f6a9_JaffaCakes118
-
Size
784KB
-
MD5
0c2b5bfd162078edb82fdca013b7f6a9
-
SHA1
1470b523daf15f86ad2133c0086e12b34238edda
-
SHA256
9e7bd9523d64f4d0401564dd69ee14c2e1af13955f1e0e4cc5f6f5bd84469408
-
SHA512
a5fc45c0babbf762c10ba5dbc15cd8dcf8eca4d21282d28549073b70801a180c7e9de026623fdbdeadebab8272ab708adb2021cec3aa20b68857609d77cb5805
-
SSDEEP
24576:spC8sYgoHON6Tk6CU90mVFsBpcd/CoIYl:+CHoHOCks9jw0aoIY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c2b5bfd162078edb82fdca013b7f6a9_JaffaCakes118
Files
-
0c2b5bfd162078edb82fdca013b7f6a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE