Behavioral task
behavioral1
Sample
0ceea0ac9dd8261c5398951dc845d1e2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0ceea0ac9dd8261c5398951dc845d1e2_JaffaCakes118
-
Size
3.7MB
-
MD5
0ceea0ac9dd8261c5398951dc845d1e2
-
SHA1
d71d1da9a5cd0d485d6ae272759653b197b8659f
-
SHA256
7f57ac3ebcb9730677fc412c4148f98ac97b9ffa9784539b4511065d5c564fb6
-
SHA512
d49c2cdf6ebb8625b196edadda2b4e51d33676f86fcc13d98870cf0cdf85e8b6a7ce12a77f52c571dea3e38746ebe9991c2f983d197fa2cfa2c3b17adcff4d38
-
SSDEEP
49152:2RBwfHcFSoJ8u+TwStHCt4BAEreKZcN3Tal20VDv5ApmkpAPLQPFlIj1ZzntI5DN:2R34JwNtarHimZRapmJoIjfntoGFq+o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ceea0ac9dd8261c5398951dc845d1e2_JaffaCakes118
Files
-
0ceea0ac9dd8261c5398951dc845d1e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 996KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE