Behavioral task
behavioral1
Sample
0ddc116f0011489bd3ba1cafeeda89dd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0ddc116f0011489bd3ba1cafeeda89dd_JaffaCakes118
-
Size
23KB
-
MD5
0ddc116f0011489bd3ba1cafeeda89dd
-
SHA1
eeed5899acc10a8f809dcbb86cacb0af87361359
-
SHA256
ce8646d5eba5e63eaa16914f354869c65388b30197c11128d9be6171b5aabc23
-
SHA512
7a7b955fd3896798435e3704584840b263b4eb9a2053c713ea0d22b9c42e13c11b74a82159eea3607381a5d18ff14e9bd7ef1a8f45b9329dc2473b3523f762a3
-
SSDEEP
384:/TS8vWS0gKCfGN/Dn3Ih4NkRYGOBqvLfCI4Ke7Nhws3f5DRADaO/lnTQKIiU+TJo:/O8uS5K4Gl4ORGOs74j1w2Ad8WS3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ddc116f0011489bd3ba1cafeeda89dd_JaffaCakes118
Files
-
0ddc116f0011489bd3ba1cafeeda89dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE