Behavioral task
behavioral1
Sample
d0ed7c4bda75062a69c38cfa84d30e9e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0ed7c4bda75062a69c38cfa84d30e9e_JaffaCakes118
-
Size
141KB
-
MD5
d0ed7c4bda75062a69c38cfa84d30e9e
-
SHA1
cb46ac26441a9ccdc284877f2e7ef4284fdbc1dd
-
SHA256
a376a9d6ac22ac59f081a8f7123da2b5df2ddbb15ef41ae8a7cdf235e15e50a6
-
SHA512
150d35c30a3ba3f80fc8aaa1176627bd8e3f376b4568330a0279583b8c54825304a721bc190a0424e13d0ffd095ed308334a87425575f031002a6e193ef41b56
-
SSDEEP
3072:H+Im4CVag3FJWeDjWIgr0ENjF0QCBvtBoZihieeaj61cjVoutF:e6CxGSENjaoZiAeeaj6coS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0ed7c4bda75062a69c38cfa84d30e9e_JaffaCakes118
Files
-
d0ed7c4bda75062a69c38cfa84d30e9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE