Behavioral task
behavioral1
Sample
0ee81af4ac7dac660e22cbab0709d24c_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0ee81af4ac7dac660e22cbab0709d24c_JaffaCakes118
-
Size
784KB
-
MD5
0ee81af4ac7dac660e22cbab0709d24c
-
SHA1
8571fa39102393e85506af0328aa59db2309983a
-
SHA256
f61fa8ec51fdca31d81204400e89ced7ab0ffbc27279f50d86b8a1941849d39f
-
SHA512
8891955e0a8374e87801a17461b534c4edd650f2dc3bce8bdb0a97683a9672f0ae2474c3f6ac09d993c56702b8d9d1ef9c117738fbc2c4d7e5ad32cccd956aab
-
SSDEEP
24576:ORVWkCEWxlHHoZkQFzPIKge6mBde32uCAsmKL:ORINL/MrF5vds2uLsNL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee81af4ac7dac660e22cbab0709d24c_JaffaCakes118
Files
-
0ee81af4ac7dac660e22cbab0709d24c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE