Behavioral task
behavioral1
Sample
0d97396d7add36436fbd182f18d52e02_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0d97396d7add36436fbd182f18d52e02_JaffaCakes118
-
Size
784KB
-
MD5
0d97396d7add36436fbd182f18d52e02
-
SHA1
e5744148e7581c0f63a71de7027f79c3a0618fc0
-
SHA256
4e479c9a509779e49a35c342b97be26e46e199a0c6ea2cb40a3bbabe0c8a1f3e
-
SHA512
c77ca918c6496a838a6f18af06a50d9aced8a1df04df5911aa0f8334e40889fe41962b733eed2019795c8827ed91e463fdeed0a06b9ab4a14e64a1e73f5bbc83
-
SSDEEP
24576:D2VTLmBesqpP9rUN48q2Je6+mRW2lInydSmTM0hr:D25go/UCae3CW2lfole
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d97396d7add36436fbd182f18d52e02_JaffaCakes118
Files
-
0d97396d7add36436fbd182f18d52e02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE