Behavioral task
behavioral1
Sample
d24cb67d124922fa4c2635d9e1557e14_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d24cb67d124922fa4c2635d9e1557e14_JaffaCakes118
-
Size
183KB
-
MD5
d24cb67d124922fa4c2635d9e1557e14
-
SHA1
6b9c1bdd7efbd7bf0b5cd77097e18af6fd2e2084
-
SHA256
e64e7edae55c7519b99c28fc8b55b6d0b87d6a1613be4cbfde076d69a83e72db
-
SHA512
e794956a97b9fa3485b0ba26d3480d2f410a9d21c8c9d5b9b1cbcf48898500d10928f5962c88f2867ab0614c7104648729a9cd654426c424978a47d969c82e33
-
SSDEEP
3072:kamFnQYUM6m3SP2sVSdEnfWZN3cbgonk9sX1qalYuhLJNdjQVVTuP5J85Vi9iqVu:kazq3aipalYuhoao5sQkzriB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d24cb67d124922fa4c2635d9e1557e14_JaffaCakes118
Files
-
d24cb67d124922fa4c2635d9e1557e14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ