Behavioral task
behavioral1
Sample
d29b1af383aa777ab5321a559c319ceb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d29b1af383aa777ab5321a559c319ceb_JaffaCakes118
-
Size
2.7MB
-
MD5
d29b1af383aa777ab5321a559c319ceb
-
SHA1
d669dae6cdacbd3e97a6fef0b06db7a19aa59762
-
SHA256
48d2ca04cef2fe8db19e4486405ab8359f3e81c63493961147c1e787b9157cac
-
SHA512
163dbb3e38e827352ffd079ec4ea0cf34f3ea9be8167fd1d752ba32c386cdb7f0478a8944eaedde9596ca5f0c0252460f908c63dfcc1d02effc6e84c03e1925d
-
SSDEEP
49152:MX0p7L/Svb2gO36WHRe1X8rFUNJg0HXIggUR4IcMxy/hMW1R5PLHPNkEr5d:M0p7L/SD2glY4MrF6JBIggUS5/hMWVjd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d29b1af383aa777ab5321a559c319ceb_JaffaCakes118
Files
-
d29b1af383aa777ab5321a559c319ceb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE