Behavioral task
behavioral1
Sample
0e29d16fa6046877549e53d481338d72_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
0e29d16fa6046877549e53d481338d72_JaffaCakes118
-
Size
511KB
-
MD5
0e29d16fa6046877549e53d481338d72
-
SHA1
8143b5283389443410715f592b7fb1a32cf21a28
-
SHA256
12d9b67646ab015808ee398991e4296fe5a4069c13d35b6d45ce0b983dbecd2b
-
SHA512
42f50e034ce01c0734c2ba2bf74933e3f12a5b24b6b91defd595b4c4d5097d2c14b4cef3fc230dbca7942b3e3101cb5a8eb14a8fcce0bfeeb8f7d04d39e0b4ce
-
SSDEEP
12288:9pI+uHG7ibTLdlTtfbVR6ai+9X4BO6sx15l13vS7g9wsc5/:9pvuPZv/ZdGedfS7Em/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e29d16fa6046877549e53d481338d72_JaffaCakes118
Files
-
0e29d16fa6046877549e53d481338d72_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 507KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE