Behavioral task
behavioral1
Sample
0e2723493cbc12152120647f64c8b6ed_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0e2723493cbc12152120647f64c8b6ed_JaffaCakes118
-
Size
98KB
-
MD5
0e2723493cbc12152120647f64c8b6ed
-
SHA1
bc55933146050cca12f43db37ec83c4ef819fd9e
-
SHA256
c09b2262559f167690338cc9e2c14941e7a2663a28e211d0ac92fbf26f6f5467
-
SHA512
3786c014538e477fe55876dd9275754bf9e08d8be4420aab260c34d25bf760143ac7103ebf4df05bfc6b25e9795cd6a2f904ae656d78db88a92c35915bb5769a
-
SSDEEP
1536:+YjIyeC1eUfKjkhBYJ7mTCbqODiC1ZsyHZK0FjlqsS5eHyG9LU3YG8nl:LdEUfKj8BYbDiC1ZTK7sxtLUIGY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e2723493cbc12152120647f64c8b6ed_JaffaCakes118
Files
-
0e2723493cbc12152120647f64c8b6ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE