Behavioral task
behavioral1
Sample
0de7f8d2b41fcb6c7f138fd340e0cd8d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0de7f8d2b41fcb6c7f138fd340e0cd8d_JaffaCakes118
-
Size
196KB
-
MD5
0de7f8d2b41fcb6c7f138fd340e0cd8d
-
SHA1
6ca5a91bfa9881d01c72917b0fee451bf9d4a016
-
SHA256
a0da2bf5208b1e2e3ddb0d4be4b166c7e2ea4c2edb923e74fdda94a11c1019b6
-
SHA512
79dea80d817bc634cb4e8ccaf40fd734afff56f80b03084a87afff68294eb7c817fc9ebc9ea9c5b45357997ea291a724a66ab5905fef40aa5ec86cf0f271ede9
-
SSDEEP
3072:aecZH6z9YjcdyfmeezN3hAujS3UPGkyekJSSB5axv1Fan/dFzXgrW0avP:aXZHYgfeRizVeWVDaLk/z0a0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de7f8d2b41fcb6c7f138fd340e0cd8d_JaffaCakes118
Files
-
0de7f8d2b41fcb6c7f138fd340e0cd8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE