Behavioral task
behavioral1
Sample
d1886152ffceb979bd8f35ac79aaf8a9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1886152ffceb979bd8f35ac79aaf8a9_JaffaCakes118
-
Size
4.6MB
-
MD5
d1886152ffceb979bd8f35ac79aaf8a9
-
SHA1
abffdf0b775f5fb7bb5e8d2fadcb0368f1fa9087
-
SHA256
aa677c80daa888590c84041edb08d6914e0ec0f67e26d71ca7af048a3ff1557f
-
SHA512
be2411515eec31ee9077283b5de33407dcffa13d9d84f3e3cee7ef4a65ef19fc838457c2b0fda935a8920174042fd63b50645bc08f5245a877af48f31f1e0901
-
SSDEEP
98304:6l88ZVJX90viC6BtsLNtm6fP+I7O1UY2Qfs+Rp2+Gwxv:bOV190JysLNtmYX9TCp2+GIv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1886152ffceb979bd8f35ac79aaf8a9_JaffaCakes118
Files
-
d1886152ffceb979bd8f35ac79aaf8a9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE