Behavioral task
behavioral1
Sample
c0db041c170886a86ec5c939a9e0e44b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c0db041c170886a86ec5c939a9e0e44b_JaffaCakes118
-
Size
17KB
-
MD5
c0db041c170886a86ec5c939a9e0e44b
-
SHA1
7b2009a9d906558664656b24ffe7c7428c38bfa4
-
SHA256
1774c5479628bd123d3440b3677b7320bd294b93ae5a1665c41ba6a25094ce67
-
SHA512
ec8eecc66acd831bf45acfad69252ae8661332772fbd81f147bd38dee9d7cfe4688ab14f2985fac2693a831033341c560367049c7c6929cbf32ebf1641a86194
-
SSDEEP
384:JnEji0AcD5f9fgq4Qw/qCoDa2UePHuTSQGTikDaX/cgWuQF:qAcFVMmCoRDQmioMJQF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0db041c170886a86ec5c939a9e0e44b_JaffaCakes118
Files
-
c0db041c170886a86ec5c939a9e0e44b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE