Behavioral task
behavioral1
Sample
0dcbc466ca58e249ef5aefbcbdc4d5c5_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
0dcbc466ca58e249ef5aefbcbdc4d5c5_JaffaCakes118
-
Size
17KB
-
MD5
0dcbc466ca58e249ef5aefbcbdc4d5c5
-
SHA1
e819d04fe71e247b8f4f5f9e35740cf572d943da
-
SHA256
48288495fe0f4673728cc3eb801e1849acfae64dc3992af37719086eec8ff730
-
SHA512
6c6db4bf4eb2b659f4ef27c8039b9e4dba27207dbd802df97afec11d13c4c3065f0d8532e6674806db7278f8c167efea12df658daa9190e1b33702d835c8fff8
-
SSDEEP
384:hw4wrvEvLbhKTaaeY/+azfmcxxPu2qoudaNJawcudoD7Uh:OZrvEP02aec+ce0F2CnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dcbc466ca58e249ef5aefbcbdc4d5c5_JaffaCakes118
Files
-
0dcbc466ca58e249ef5aefbcbdc4d5c5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE