Behavioral task
behavioral1
Sample
0a2cefa043593706e2a5b0c8921e76e6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0a2cefa043593706e2a5b0c8921e76e6_JaffaCakes118
-
Size
1003KB
-
MD5
0a2cefa043593706e2a5b0c8921e76e6
-
SHA1
cdeb749aff8e1fd036bf2620840e5a9b6d9c8fca
-
SHA256
ac026b9cbf08644417abc54d65b3b98241c88c4ee370380c47444fc0dfa9d4f7
-
SHA512
b85ea4604c77483cbed5e5f73fd5f9da8176a79a41319756165f04f807c9000cfabd2ca58e3efc0ff03b6a3df4bbce520aba6f3534c8f8017f969761d8480ba9
-
SSDEEP
24576:6th1YVPSQXXMx/0fI3W8a256Q0cH5f+64JRWFULCD+:6th1YVtHu/nWMgQ0cN+9zWFULG+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a2cefa043593706e2a5b0c8921e76e6_JaffaCakes118
Files
-
0a2cefa043593706e2a5b0c8921e76e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE