Behavioral task
behavioral1
Sample
d266b8cd8216cf9931eef1ed0b0fc581_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d266b8cd8216cf9931eef1ed0b0fc581_JaffaCakes118
-
Size
405KB
-
MD5
d266b8cd8216cf9931eef1ed0b0fc581
-
SHA1
78f2c6b2e5773199b59d3a8a6ddce91172864c9d
-
SHA256
72b8e6275ea3bf99348f679289a55d7e7b2ecd78e0905d6644c095a245eab3bf
-
SHA512
365d5d35453535592f37401e2a394d530d2a877d3bc1e12a7126090970ca110d8ef663916cadf4e58c62e57df49b55bcdc917866bf6c5a4503b9c981663fb781
-
SSDEEP
6144:fYcox4f2beLGbFvBqczKhVTqocW68TkymP1R4tcPIPSyM+u6/pjLZz1qBK5M1mou:fyZb2cOpk7PL4tcPIBMivV0BK5joS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d266b8cd8216cf9931eef1ed0b0fc581_JaffaCakes118
Files
-
d266b8cd8216cf9931eef1ed0b0fc581_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 996KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 389KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE