Behavioral task
behavioral1
Sample
0dd598d64c51dbc64a57b7729031ceaa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0dd598d64c51dbc64a57b7729031ceaa_JaffaCakes118
-
Size
12KB
-
MD5
0dd598d64c51dbc64a57b7729031ceaa
-
SHA1
97378faf80efe9289617809d11c7cefc32091693
-
SHA256
9c0670e703378908a2a427b3f7802b8a65c705768ecc4571de933f14c53446ea
-
SHA512
7ede6c9913b2cf90c2ebb38dee2713e7c7f826801c07f71d2ed665b3cf45a2d4744cb0c4e29ac54cdbf74b08d09ef60362cf0427f1edfaebeb7e42201dbc7500
-
SSDEEP
192:Fl3jZaIiw6ee1XFx/4LhdC2Vg2FaNJhLkwcud2DH9VwGfctwop3yt/aLOtp:nTZd6e34iaNJawcudoD7UtpNLOtp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd598d64c51dbc64a57b7729031ceaa_JaffaCakes118
Files
-
0dd598d64c51dbc64a57b7729031ceaa_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE