Behavioral task
behavioral1
Sample
0c46a0abbaba390ce03ed856ecbee05b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0c46a0abbaba390ce03ed856ecbee05b_JaffaCakes118
-
Size
524KB
-
MD5
0c46a0abbaba390ce03ed856ecbee05b
-
SHA1
61e386030fdfbb8bcda50b118b5eeb3483d5c346
-
SHA256
a60c809d1fd4b719f18ee52a28cfe9ec2728af9198ea0cd3463058d1bc208d78
-
SHA512
0bc2589b7771df7b66eae0d3d27da0b255ec645fcb2a97917fdcd4b25f37fbc2a586831efed3f1d577ece7830f5239a8628f185e7e85e96074f6575795405674
-
SSDEEP
12288:BmYOYv4GYswOyM2EY7WMTugWYCKgp4AkEJ/HyUubCJv/Ni9oS:OYv4RswOah7kguKgydW6UySv/s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c46a0abbaba390ce03ed856ecbee05b_JaffaCakes118
Files
-
0c46a0abbaba390ce03ed856ecbee05b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE