Behavioral task
behavioral1
Sample
0c7d4a6423358496146fcb680ca02363_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0c7d4a6423358496146fcb680ca02363_JaffaCakes118
-
Size
10KB
-
MD5
0c7d4a6423358496146fcb680ca02363
-
SHA1
03d18b8360422c7b51a6a76acfa628679e58ce67
-
SHA256
664940a9c33a7eb23bbe8dbdf508eba3ccb47a6b7a9a791f36f79ac496179ac7
-
SHA512
99214a89089f40c4411077a277863afa5510d57a174580a1f4221445135048df49c2dc46ed9a6c712ce6d82e365680ce069c976571f00d68a172f5da68c88156
-
SSDEEP
192:eZcUzXevqOwbfBlEDAetOhEZi0SSeDXS8xFaNJhLkwcud2DH9VwGfctdU:eiUzGqh6tED/r7HaNJawcudoD7U4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7d4a6423358496146fcb680ca02363_JaffaCakes118
Files
-
0c7d4a6423358496146fcb680ca02363_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE