Behavioral task
behavioral1
Sample
0bd5a533c378ca9b315e6d20c900fade_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0bd5a533c378ca9b315e6d20c900fade_JaffaCakes118
-
Size
8KB
-
MD5
0bd5a533c378ca9b315e6d20c900fade
-
SHA1
c971c4e55e5c834ec796d53afcd5878d30f0bcd7
-
SHA256
9d904306bf1fc12899c99fd5b8c95f69d0d9ffb7834c3e74ed82454274ab68f6
-
SHA512
bfa904ef3979f723213e2cc0b918df4da5844bf6b8fe6dce70e270eb801a37ab6d95be8a536585e73caae783d2a7b3a2cd706cf63d3fecc930c4f3cec0dc0544
-
SSDEEP
192:EdOvToKijDpyBlUqKxaSvdMsFaNJhLkwcud2DH9VwGfctlnO:Edypin2lUxxaSvd7aNJawcudoD7Ui
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd5a533c378ca9b315e6d20c900fade_JaffaCakes118
Files
-
0bd5a533c378ca9b315e6d20c900fade_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE