Behavioral task
behavioral1
Sample
0375bbf96bd62d913a84eb6ca14b450b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0375bbf96bd62d913a84eb6ca14b450b_JaffaCakes118
-
Size
492KB
-
MD5
0375bbf96bd62d913a84eb6ca14b450b
-
SHA1
650ae5f9475a848a98171ddc8980b8676360cca4
-
SHA256
63316e62c24a9a94d03efa3dd4fadeb92cfce33902574e6852adbacdee734a74
-
SHA512
0adf6620ccc42b1add7386500f310efaa3866726df944347732fd03cb7ed152feddc8889db49094b4f7fd10fb617368ace6e45840072a2ef320a2e12f7b52144
-
SSDEEP
12288:NfOYeebpze9LSFCwZ/5+4h582spuFX8FytItwmAKB5wz0hfol:NmhcpELSFCwZ/5+4h587pFFRwmTwz0RY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0375bbf96bd62d913a84eb6ca14b450b_JaffaCakes118
Files
-
0375bbf96bd62d913a84eb6ca14b450b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE