Behavioral task
behavioral1
Sample
d188f6669be093c418a8144a09db2ec6_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d188f6669be093c418a8144a09db2ec6_JaffaCakes118
-
Size
784KB
-
MD5
d188f6669be093c418a8144a09db2ec6
-
SHA1
e9a685c12596245353df386a52c8df021b594f3f
-
SHA256
967371958741ae587155bbb5f88734b1cca1690664862e5b8d05652b923619b5
-
SHA512
155186d532f9a5e6797199167c1b11c30deea4bff337f094e8ddef886253c483c11a671454127db9a4d5ad395a0ad9b5fd0ca01c72003380afe3a6748a02ae9b
-
SSDEEP
24576:rOloMs21yVKJPY1uEY8z17XrBHF/1s6O0ZT9BYLhS:XMb1yEVEY2Jlts6O0Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d188f6669be093c418a8144a09db2ec6_JaffaCakes118
Files
-
d188f6669be093c418a8144a09db2ec6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE