Behavioral task
behavioral1
Sample
db9582b6273daaa5f6bc4463f0fc2b0b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
db9582b6273daaa5f6bc4463f0fc2b0b_JaffaCakes118
-
Size
784KB
-
MD5
db9582b6273daaa5f6bc4463f0fc2b0b
-
SHA1
8dccba777c04c1276c18a5f3fd80606ac7febe33
-
SHA256
9230c88557ef166b3249fa209e832a73ac9b26faf143cf1c72f9e3acdf6b1e96
-
SHA512
c93f25dc6443e5796ccb7b54c9a304b815bdc0a1f71e3d9ae20b0fc03762e0af97eef217f20e2a2bb927f6a871e81f65b2a5777118be5a53c5ce4d5f08051815
-
SSDEEP
24576:AFmD/ndH/ELXWeibr44MqMSHXkRfyv44n:AFmD1HYlin44vfefy1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db9582b6273daaa5f6bc4463f0fc2b0b_JaffaCakes118
Files
-
db9582b6273daaa5f6bc4463f0fc2b0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE