Behavioral task
behavioral1
Sample
0e0aad1dbaf218f37cc6eea8d0d6c6ae_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0e0aad1dbaf218f37cc6eea8d0d6c6ae_JaffaCakes118
-
Size
296KB
-
MD5
0e0aad1dbaf218f37cc6eea8d0d6c6ae
-
SHA1
7da786b814561bd25d60a33b81ba662957a63e45
-
SHA256
ed2743f43883e80cacb4f80e999b27d2b30ea9e4d0fdd0708c2260e312e6be33
-
SHA512
eb01f4a33924449c0c49793c391f95ac1ef5293088d2a143ba6cabf5c8d4eaa7c66b7a14d1ed03d37a978962e437c6612aecb011c7fecf0c192f6240d86f5bed
-
SSDEEP
6144:PbLxOwu2ekXsH+MBC3Sjnlkxjr9kCs+q0B9BeV/CBLKAv4mbyYX+XR:jAwIkXpMBZjaXkp+qawV/KnXU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0aad1dbaf218f37cc6eea8d0d6c6ae_JaffaCakes118
Files
-
0e0aad1dbaf218f37cc6eea8d0d6c6ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE