Behavioral task
behavioral1
Sample
d0838183740978bb9ec6ee6a0856a95b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d0838183740978bb9ec6ee6a0856a95b_JaffaCakes118
-
Size
172KB
-
MD5
d0838183740978bb9ec6ee6a0856a95b
-
SHA1
4e5cf29acaad8f89e5e3117a97c634037658c6d2
-
SHA256
3791bae22ad0894d20465ab76e15048f72c26f0f048defabbec677e230277cfe
-
SHA512
a7200799b8249c702358c990018aeca61757873d1f1dab27e892b8ee71de16d8e137c4bc7df67ea21992662976dc33ab5e4f87231c6cdf1abd7ef703a8b0038b
-
SSDEEP
1536:n1XeQgMIs9QZgn9N3wVmJ6eRK0bvXZ3e+CUvv6z3D3sLX3KSStS0x57lZAz0/rd3:n8FSv3nJ6eRtbB3eaK8znSoMbuz0Dw2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0838183740978bb9ec6ee6a0856a95b_JaffaCakes118
Files
-
d0838183740978bb9ec6ee6a0856a95b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE