Behavioral task
behavioral1
Sample
dc699ea3b237721c2fe8b8a4bc8916ee_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
dc699ea3b237721c2fe8b8a4bc8916ee_JaffaCakes118
-
Size
1.5MB
-
MD5
dc699ea3b237721c2fe8b8a4bc8916ee
-
SHA1
dffa673e61a38903541fd518820431174be140a6
-
SHA256
20c34d6f90cab4e4401e6e6bcb0a58d9d09572eea9073e981eaca1c6d2237bc4
-
SHA512
0d4b2d51a1dcaf19e6b4edfb8d4acb76ef6838ee34a63a9182a97380e28ce500d6cd58b3df0225284ed553dcf0da42d04b2355eae808063e44c493a490b84880
-
SSDEEP
49152:YdPvqvWD+DjsDFvcYcaohKN7YOhqBFuegXz846F9054:YdqvWD3Fv7VUKNMOcBFIXz8po5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc699ea3b237721c2fe8b8a4bc8916ee_JaffaCakes118
Files
-
dc699ea3b237721c2fe8b8a4bc8916ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE