Behavioral task
behavioral1
Sample
d1b1f11f79727f84b59aec5c1bdb33a8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d1b1f11f79727f84b59aec5c1bdb33a8_JaffaCakes118
-
Size
674KB
-
MD5
d1b1f11f79727f84b59aec5c1bdb33a8
-
SHA1
071930b48f264a03ae55c3975f1b7cca183cc3d3
-
SHA256
f5c66165acb9274fbbb87008ee24d6865f14fc75259adf3e90ffb2c57b866d0e
-
SHA512
1535d95b6f4018560fa1dfb9fffaf8f359ed054eaec8dae10b054445b70cad608e715e4f4569453739a9d0d3ba0e23fe6a52780c17e6875b827da7592e49c32d
-
SSDEEP
12288:XE2rHXmxQfLkgpFmHoC6AlaHn/DWXtzDXIuPlkr7zQbq0sw:XNTXmK9qo7yq/D4DYuPlkr7s7sw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1b1f11f79727f84b59aec5c1bdb33a8_JaffaCakes118
Files
-
d1b1f11f79727f84b59aec5c1bdb33a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 944KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE