Behavioral task
behavioral1
Sample
d0bd9cad959ad0bbb11c31daa183dbeb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0bd9cad959ad0bbb11c31daa183dbeb_JaffaCakes118
-
Size
155KB
-
MD5
d0bd9cad959ad0bbb11c31daa183dbeb
-
SHA1
4d42e6f5e11b37726811f189434e4e53109e60b5
-
SHA256
d8756c093cda7e2aff67b2872ea3bacc490f9e2449afe01558c911704e942e16
-
SHA512
f9ee7286d590fdc9fcb310fec5d9c5dea13e6542afe6c70574302a11c6d78540961b8427ddd117255d421e924948e942f8218208e5950a2de2539628353fee88
-
SSDEEP
3072:yiRibyA3jrCFWq16pSxPds81RL8K6p30k+aheJLm2t2RVMnWnH:7AbyAqlfpRRg0ds2tCVMn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0bd9cad959ad0bbb11c31daa183dbeb_JaffaCakes118
Files
-
d0bd9cad959ad0bbb11c31daa183dbeb_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE