Behavioral task
behavioral1
Sample
d0be8997196302815d818a7e5976dea9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d0be8997196302815d818a7e5976dea9_JaffaCakes118
-
Size
370KB
-
MD5
d0be8997196302815d818a7e5976dea9
-
SHA1
605e80ba7ff91d681e7578aa9bfabd2f646a027f
-
SHA256
9ad8e0ef0f48557b3fc02105554e07e075e89b2985ac4105f79e669d156c7fe7
-
SHA512
5c3ccb66ae82055619fc0477697bc994e0f1a04b95ec8c7ced56e3f7c21cb73434774f72bfb3458c392d6db9fe043ec51fc7c0cfe09ed3d1c4a4b8dc28a17c9b
-
SSDEEP
6144:gJf/bHF4uB7JTSxySYV1g9LCeXv7wo53POKl2nAd4+X7U0qzl/I9hlIBpfxSYAr2:SfDl4AlHVeLCov5WlZ+HqzS0cYmHd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0be8997196302815d818a7e5976dea9_JaffaCakes118
Files
-
d0be8997196302815d818a7e5976dea9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE