Behavioral task
behavioral1
Sample
d2711ded0c899079d875e953c3f6a9f0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2711ded0c899079d875e953c3f6a9f0_JaffaCakes118
-
Size
784KB
-
MD5
d2711ded0c899079d875e953c3f6a9f0
-
SHA1
bd71a6601aa7e70943d995436447a2320da277b8
-
SHA256
d1b0fb797f37745b8547916fe29c0334e147843f0f75ca069d84c070734aebb4
-
SHA512
0f8c635a490418372f8a315cc7c802914e14e0193df759502c85b2af4594f77fa5f0ddd750a0ea63eaa5bafd3331f3de5a22753ec6c77849574892b6d18d9985
-
SSDEEP
12288:0q9OIiA95a0JwtrNzSyhzMm2u96lFxzVQxp4/KwuePAIWV/GbS:0qcXfNmkzMmj96VWxOiwuoWYm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2711ded0c899079d875e953c3f6a9f0_JaffaCakes118
Files
-
d2711ded0c899079d875e953c3f6a9f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE