Behavioral task
behavioral1
Sample
0ec0b0b2320f93b29bc52e9850f28656_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0ec0b0b2320f93b29bc52e9850f28656_JaffaCakes118
-
Size
1.3MB
-
MD5
0ec0b0b2320f93b29bc52e9850f28656
-
SHA1
79c5bf769069cc8550cfd75d1e4f171983b13dff
-
SHA256
8d53054e21a47934230f4de40d87a1f04ceb9b1464cda1b85e97465de45519fa
-
SHA512
e203595f367499f1304eb11598b81f5f05d8db9fdc8a88b7aca9f18ca4a056e59016c598f404036c4d5d327b1a48d27ab3114bf738ac69b850281ca843e90733
-
SSDEEP
24576:uYWtGCjFdtGrQVgArFDzyXlJVsFCweRDkc/dTq8l056Su+AN8UxplvG:uYTCjFdtGrQyQFDz0B4BehBQDTu+uH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec0b0b2320f93b29bc52e9850f28656_JaffaCakes118
Files
-
0ec0b0b2320f93b29bc52e9850f28656_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE