Behavioral task
behavioral1
Sample
0bcbae67b7c2284dfca4b18940790819_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0bcbae67b7c2284dfca4b18940790819_JaffaCakes118
-
Size
1.5MB
-
MD5
0bcbae67b7c2284dfca4b18940790819
-
SHA1
b8073442594e57b881f0b4dbbd8310f7e99efd4a
-
SHA256
11b00b3364ca5c2c3a3ac0d96997b7180753965fdc76e6af9f6e7a9f388666c7
-
SHA512
e22f5bae949ba3da8fca000d4cfe3cf818310c23bd26f0bd869c63b005b3d37222fa8a1311f98ef98dbc9379b9d7ac50fdffe276d36b1d50021b89b93a26ffb2
-
SSDEEP
24576:6LaVZqv3YKUIg5bvSXPjRcNJOVWkBYKUIg5bvSXPjRL:mZ34ZlcRcNJAWq4ZlcRL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bcbae67b7c2284dfca4b18940790819_JaffaCakes118
Files
-
0bcbae67b7c2284dfca4b18940790819_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE