Behavioral task
behavioral1
Sample
d0d1c53fe45dad3cf779b4b4af77beed_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0d1c53fe45dad3cf779b4b4af77beed_JaffaCakes118
-
Size
784KB
-
MD5
d0d1c53fe45dad3cf779b4b4af77beed
-
SHA1
914be3a405313b4e5838b8e7b3a9ac570018c540
-
SHA256
7b4d019c0310d948b0070bec89cefb05429cf89fdfa7cb879e6fa33a0177e8a6
-
SHA512
4dbe7083e183fb0e6198f41e11c218352e83d1caf62461a9498c2505177b115d5ac70a19a51fdef266e08802a108ca3512de6a7c22d558b488abd14a5cf52520
-
SSDEEP
24576:IXbVSVRQ+4f+Eqb8Ie6vnH8f6bLPfYVai/xCfPc8rV:0ZSM+nde6v55ict
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d1c53fe45dad3cf779b4b4af77beed_JaffaCakes118
Files
-
d0d1c53fe45dad3cf779b4b4af77beed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE