Behavioral task
behavioral1
Sample
0fc616e00509552a728b603eb987f8b7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
0fc616e00509552a728b603eb987f8b7_JaffaCakes118
-
Size
103KB
-
MD5
0fc616e00509552a728b603eb987f8b7
-
SHA1
411be89a5d9429d3d062f4f2e8bf8f39607d121e
-
SHA256
d8ee536a0cba2ed3d4ff13a6c7155509d500a1b4f3c7f2e229a54f3915b7267c
-
SHA512
6a2477ea4ed6c6d0323495546670d5668253c9af11e1473088ccf70e1721bbd486c5e17c95d03131fc3505290e0558f623c92b9c2c184e67c108de08097bf0f8
-
SSDEEP
3072:Tlp1Fa/PTpxFmNUC/Y7Y4BLDG6l2APUU:TlJaNxkc7De+5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fc616e00509552a728b603eb987f8b7_JaffaCakes118
Files
-
0fc616e00509552a728b603eb987f8b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a80d4073304c34d4f6101bb0999883e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
MessageBeep
Sections
UPX0 Size: 76KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE