Behavioral task
behavioral1
Sample
0d17b657c7df33b9af9aae02e0e2b01a_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0d17b657c7df33b9af9aae02e0e2b01a_JaffaCakes118
-
Size
322KB
-
MD5
0d17b657c7df33b9af9aae02e0e2b01a
-
SHA1
267ccf7b2f46ec66cbd62ef4a05f657c7c5c1c09
-
SHA256
bffdef31c594f9eca930e34976823aaf077d4d2a13267c4ec39b5ae3889dd9e9
-
SHA512
ee3053e07af0e16c0c0d5c80ff0849cd4930101d0d7166e5b827800768fbf97adc2157b3387622c120151e9fa993697c51989ed3d8173381c87892812cdff55d
-
SSDEEP
6144:VYPOodm30xwcP9n2U82xZkckexoS8pm97WQPY4Wgs+plw8U:6dm3xc4L24cNoS8c97WybZbnU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d17b657c7df33b9af9aae02e0e2b01a_JaffaCakes118
Files
-
0d17b657c7df33b9af9aae02e0e2b01a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TUPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE