Behavioral task
behavioral1
Sample
c0b6ad65dd559b72bc3e8ac9a0931a49_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c0b6ad65dd559b72bc3e8ac9a0931a49_JaffaCakes118
-
Size
238KB
-
MD5
c0b6ad65dd559b72bc3e8ac9a0931a49
-
SHA1
0fdac98ec965cee92e3fe11e6b9eb7a40a98dab6
-
SHA256
53b344f6557bcf013ec2f7bc87c490c4d565ef0c1bebdddf66be9536e38493d1
-
SHA512
5d7288b4619b10fd25590f69c32ee0bf56b6011f4e2e4c73c18e651bca85b60d318a4bf2ef4e528b555c8e56e81330f93cea262e76d14640e29026e176b2e6c3
-
SSDEEP
6144:DzIdQq3Jh/Z0n9jqvqmgmreXT0M0NrhSfwqMGy:DziQq3Jh4jqvq6eD0rrh9My
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b6ad65dd559b72bc3e8ac9a0931a49_JaffaCakes118
Files
-
c0b6ad65dd559b72bc3e8ac9a0931a49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 234KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE