Behavioral task
behavioral1
Sample
0ad765de8292f80ba192c632140f39a3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0ad765de8292f80ba192c632140f39a3_JaffaCakes118
-
Size
143KB
-
MD5
0ad765de8292f80ba192c632140f39a3
-
SHA1
aba0962e3eea74132d26f916e93fb9f28b231bcb
-
SHA256
bcd12e5d4c31dc09bec1f20b6aa61c620a1ffcb6d2c4e05e81ae1a74924f32f9
-
SHA512
ab959670573ca4372c72475bb2c033a36e0f0fd4319143275ceef754e655055a6dc2b4b33757663d301ec2b805091ce9b804165bf9b91cffbed2f761e6bb0112
-
SSDEEP
3072:rgN+NspuUdzh5vaBAzmeu2ZN/Lh2uOhIAsdxn6sM0TZMl9V:sN+iuUdzh5vaBAz5N9mhIAsdxn6sM0Tc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ad765de8292f80ba192c632140f39a3_JaffaCakes118
Files
-
0ad765de8292f80ba192c632140f39a3_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE