Behavioral task
behavioral1
Sample
33094f1f9f1b2d845c75500f3be48841_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
33094f1f9f1b2d845c75500f3be48841_JaffaCakes118
-
Size
199KB
-
MD5
33094f1f9f1b2d845c75500f3be48841
-
SHA1
9d999f9be3e0e6278fb27899535cb3861c9b337e
-
SHA256
ebc860a4b065ae851a28aef670d79131fc7b23e89300ec02a54a79a4d518f24e
-
SHA512
68dea61e634375a873eeff7eead33a076b7e0e85bd698a780008a069483a8afc90cc58203a8c90891dd618f16a2dd91d6a49805b22a349c1550505427d863518
-
SSDEEP
3072:WybBm4TO4bYZ4nahXNxQ/5P9g5rxBciHIzCjwyYcj:/Bdy35a5lg5rxBZxw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33094f1f9f1b2d845c75500f3be48841_JaffaCakes118
Files
-
33094f1f9f1b2d845c75500f3be48841_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdprsdw Size: 4KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE