Behavioral task
behavioral1
Sample
d0d449b75b83edbd5b14fe0167e8f39f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0d449b75b83edbd5b14fe0167e8f39f_JaffaCakes118
-
Size
94KB
-
MD5
d0d449b75b83edbd5b14fe0167e8f39f
-
SHA1
19e6a7f9ab88a03dc90f0dd1a11adcefac70f532
-
SHA256
66572cdf07676f71b430626adf401e6db329637185e0ff9e1dd535901adaa770
-
SHA512
5f28c41b77d6ea82246e6e5d7391f3f3ca3ac08f06acde3d4af6217c9601757d42b32936e4fb9eca2d1a566f4271bd18ac6235215714150c3398ef7c9ea34e63
-
SSDEEP
1536:q/2twyJDtfl/RdfNo+Av2LDd724Hm0AIHDpGDEvl:0Ywyll/R14vqDd724bAIFGDEd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d449b75b83edbd5b14fe0167e8f39f_JaffaCakes118
Files
-
d0d449b75b83edbd5b14fe0167e8f39f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE