Behavioral task
behavioral1
Sample
d0b39c7e36b43dcb8458dfb2edd2e722_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0b39c7e36b43dcb8458dfb2edd2e722_JaffaCakes118
-
Size
543KB
-
MD5
d0b39c7e36b43dcb8458dfb2edd2e722
-
SHA1
4e1f6e170bb54837b452d829aa1ef35fe1e2079a
-
SHA256
e3a9b2a05675b37470cc9b88a57b5d855135824fab1ba0559bc48c4eed821f2e
-
SHA512
698d064341af42118b1a394f5d46f705475dab7c0a6fea93fb401ea2b396de7be63ea70c5087378b1877bc5fa68df669a7b1c0ea33723490a1035c7eaf8c3783
-
SSDEEP
12288:/+P5NgLEJj+MshDwi+hdUiRTCwwyAJLU2ts2hMmigQCxDYAjmi3rk+RI:WBGEx7liDaCNvC2PdDYAjBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b39c7e36b43dcb8458dfb2edd2e722_JaffaCakes118
Files
-
d0b39c7e36b43dcb8458dfb2edd2e722_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE