Behavioral task
behavioral1
Sample
0db97954c679abfd4dd31a08d9353525_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0db97954c679abfd4dd31a08d9353525_JaffaCakes118
-
Size
2.9MB
-
MD5
0db97954c679abfd4dd31a08d9353525
-
SHA1
e361ff9b72f1498e4d6c05e935bc02d9e1bc1aa2
-
SHA256
7cf8bb4efed6d5a14402ff7766621ab8fc0629f66ca39027cb90061d301cd833
-
SHA512
2a607ed885235ba7e622d9213385cbc66cbb39759508f4246c3afcf6e900921c54e5d27fb94026815ee65a6a9302b0f1742fa696492d9e77277f8992628d1aa3
-
SSDEEP
49152:IHt9KBNgqZQ9u45BYYkYswUxuD+aEgP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:QKBNgqe9Z5BaYswUNapgg3gnl/IVUs1h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0db97954c679abfd4dd31a08d9353525_JaffaCakes118
Files
-
0db97954c679abfd4dd31a08d9353525_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE