Behavioral task
behavioral1
Sample
0ed2c183bc89f7f5f45ad29da47e170c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0ed2c183bc89f7f5f45ad29da47e170c_JaffaCakes118
-
Size
336KB
-
MD5
0ed2c183bc89f7f5f45ad29da47e170c
-
SHA1
f9ddc50d2fc04b5d25d4d8699b48795c73a39b7c
-
SHA256
707d948252e6cd267bc6e5d3b6057682e857497b440b3fa6afee7da7014b0b42
-
SHA512
36684efa3e722b4bb2b2db4b199bff186a35feded02690a50eebe0cbb62f3a1238d80bbb66d9ae8fb82ab8bf7ea68b942490887455329a7d9dedbc6011793a38
-
SSDEEP
6144:t86C6a9sFhTYEapw2EV1UiMic3Ocq0paWTS2FMYc2ak:t5isFhTYE7dch5lpcN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed2c183bc89f7f5f45ad29da47e170c_JaffaCakes118
Files
-
0ed2c183bc89f7f5f45ad29da47e170c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE