Behavioral task
behavioral1
Sample
d0b65b22279354c8b376f548526c1bcd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0b65b22279354c8b376f548526c1bcd_JaffaCakes118
-
Size
8KB
-
MD5
d0b65b22279354c8b376f548526c1bcd
-
SHA1
e9e2437f12180161888ba87e2cfd3ebcbce08542
-
SHA256
3fc1dbd5c0b6c7adb105789b9a96ff4ab564c2a32cc6e4d13bf6589e854bef93
-
SHA512
0a20963ad0ce478fafd5527af3d190185c1d949d07597ea52893b7efd6b8f52e14a5ca09298e1be9c0b10f048d8a7a026684947d76d99d9cc3ba340b5f71b8ac
-
SSDEEP
192:vDwcKy0PcKnoeuNRjqjFaNJhLkwcud2DH9VwGfctlHO:bM7D+xqpaNJawcudoD7UC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b65b22279354c8b376f548526c1bcd_JaffaCakes118
Files
-
d0b65b22279354c8b376f548526c1bcd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE