Behavioral task
behavioral1
Sample
d16ad68b8d1e807f64a2e8e722886847_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d16ad68b8d1e807f64a2e8e722886847_JaffaCakes118
-
Size
784KB
-
MD5
d16ad68b8d1e807f64a2e8e722886847
-
SHA1
445d2dbc7d4f8a855b6b94696522efe8a72bbae6
-
SHA256
1fe4a6f0c914169d6abc2118d595e4191a3b8cd0479114ec177a78c670006f90
-
SHA512
31b900962a360f777f34489b469f81d4a3fba83ba904283e5c15a47a9762928299ace24f3efe37b445519b0a98076b421777ae204419c9ab47a155f63a5c4f4b
-
SSDEEP
12288:d9J/TJHtrwKBwedvPavE6q6+Ozig3lfF4HKsxC1qZBtmZM+3pvCh3mzJeHFLK:p/DrOe1PavEZ19gVfqKsA1Dzgh3mz+O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d16ad68b8d1e807f64a2e8e722886847_JaffaCakes118
Files
-
d16ad68b8d1e807f64a2e8e722886847_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE