Behavioral task
behavioral1
Sample
0e1d7b17363d78964455cb6de5a534a2_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0e1d7b17363d78964455cb6de5a534a2_JaffaCakes118
-
Size
5KB
-
MD5
0e1d7b17363d78964455cb6de5a534a2
-
SHA1
bbda4b9903af4f37e9989c2e62f7b49146460aa7
-
SHA256
1a12e2f6764a23674abb89f995f614184b2de52e002587d95b72b610a04b7918
-
SHA512
feb53edcc024e6a919adc058f26111a0d5f887b46ee787c2b043c51811d5451b05726f134b3e58c4b8af13e52ad9c19b3663fcffcb96f737a58e4d4c651c0aa0
-
SSDEEP
96:86zscWAW1FgsZexFutCJVMkBkdGeCaKrrZE8SZNfTytNITpRexkj8HW1NBh29rT:3scWD34xFutLkBkdvKfZJSZWOR8S8E6R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e1d7b17363d78964455cb6de5a534a2_JaffaCakes118
Files
-
0e1d7b17363d78964455cb6de5a534a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE