Behavioral task
behavioral1
Sample
d01f80b866688d680ea719527f037ded_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d01f80b866688d680ea719527f037ded_JaffaCakes118
-
Size
784KB
-
MD5
d01f80b866688d680ea719527f037ded
-
SHA1
539879e113d374e8e53119ffe053b00b8a0b8bfd
-
SHA256
25d08bae449e45708c7b671571ff519e3d27cfdafffeeb39ede24048d71d20f3
-
SHA512
b33ad0579c762c3458c0a3b05fd100ffa4ed005916f80c9e72f71a054abe818ff49ffa043769041c1bd2dd09a07b95b9cc6afd362a66b666ee5d5ad97a6d4649
-
SSDEEP
12288:ug53ZLn7cn5yF2Qi5PlC/i4NVrmeOyNO/i4Og7FuVZblYD3McE7zWo2Q23nB5q:/3L7cnjPgiem9b1Og7FuLf71anB8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d01f80b866688d680ea719527f037ded_JaffaCakes118
Files
-
d01f80b866688d680ea719527f037ded_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE