Behavioral task
behavioral1
Sample
d19bcddf0cf7d48a94a3a52d536c9da9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d19bcddf0cf7d48a94a3a52d536c9da9_JaffaCakes118
-
Size
207KB
-
MD5
d19bcddf0cf7d48a94a3a52d536c9da9
-
SHA1
fd2d49995b586ac458cebaf71186655ffdf85437
-
SHA256
15c27650829b3f795daed5341cd8954d0e7d741212aba40e6222524436c9310c
-
SHA512
52a17712ca80828832641f8eb7e16f6572d4f02837826dffd119da9dca0740c7370065cb465c4866d759d91e42a2dec3bd32e3b85c1cc4bc44ba7d4e2ee766ad
-
SSDEEP
3072:9Cv7/1tG/maYYbKHx0wsVjpjl+pzAF9WqXNV1np17Q3XgjS4lSbzjfntsc:9Cvj1t2dYumEVZlMsnWInX7SBb/P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d19bcddf0cf7d48a94a3a52d536c9da9_JaffaCakes118
Files
-
d19bcddf0cf7d48a94a3a52d536c9da9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE