Behavioral task
behavioral1
Sample
93d2e6d430f1376e9f53c4fd4a1a0428_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
93d2e6d430f1376e9f53c4fd4a1a0428_JaffaCakes118
-
Size
360KB
-
MD5
93d2e6d430f1376e9f53c4fd4a1a0428
-
SHA1
bb71abf637fc92cdd99f92f34bde0257b6e225dc
-
SHA256
a039e62299ab324072e17eb4f6d6bc94ae17590b2c987fda2db54951c9a2e027
-
SHA512
86985e00500187e3b262f3788db8e03cc4426a836ed650d3bb7d259b56d76e8ed50b348bedf0c0526ef02870c6218f3efdd84d6e48d53878097c636bdc1fdf68
-
SSDEEP
6144:tzO/RVD5ev8I7aYxLx/STX8Oq2QF6HTqB9lfxAEpyTB2IGCN1JyrH2yeVWH:FOJNQ8I2YxFsq/6HKjxAEpy9RGFH2BWH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93d2e6d430f1376e9f53c4fd4a1a0428_JaffaCakes118
Files
-
93d2e6d430f1376e9f53c4fd4a1a0428_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����� Size: 249B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DexCrypt Size: 60B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DexCrypt Size: 78B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D Size: 96B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[-crypt] Size: 114B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ