Behavioral task
behavioral1
Sample
d0a66d8ac0f6fa1b4fc83114fa62ad81_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0a66d8ac0f6fa1b4fc83114fa62ad81_JaffaCakes118
-
Size
784KB
-
MD5
d0a66d8ac0f6fa1b4fc83114fa62ad81
-
SHA1
8b7db51788876c54672d0773715765485064aaea
-
SHA256
f57c45d02fad2c2bfc37ee265101fbebc0326e44e08d5a0c2d88d776df8c2f9b
-
SHA512
88b84b66df22b366caa26d6596038502cc8fc977991554d09c4b45a37ec11f1c2a7d17a84d1a0e2a3f5116b32e50480df7a8a495d0ed2292a67dcfc69e9834da
-
SSDEEP
12288:7HgkyHmF4MOwRr+15Ol063L7iqMth6mTzv7jX9tuQEXReD793qa+smSlZw9:qGRrr063POX6u3XpvA/SQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a66d8ac0f6fa1b4fc83114fa62ad81_JaffaCakes118
Files
-
d0a66d8ac0f6fa1b4fc83114fa62ad81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE