Behavioral task
behavioral1
Sample
d2a5a25f8152a83abac662f73b3cff1a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2a5a25f8152a83abac662f73b3cff1a_JaffaCakes118
-
Size
145KB
-
MD5
d2a5a25f8152a83abac662f73b3cff1a
-
SHA1
7617b7705e1d34edbf0ea5eff75c60039b375f64
-
SHA256
7f697d1023cd99ff0377be148f667e5ab9ade4b4449c1fef89d9f4d4db8e9a9d
-
SHA512
53b405df5865be356cbf2c681bb83114805644da77c644c4158e07c25cb1724a50cea3b85d7f0984d996385b13ef81c4ed9c656a329943cdb0cc287816f78b1c
-
SSDEEP
3072:Vp60D0pe4R5rmnpnIbiMlUV+jHMqtHHpV1R62jcmiKGdZME9bjfK1rout+mO:VpxDr4RWnIbjhjcnBZMebjSJoS+r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2a5a25f8152a83abac662f73b3cff1a_JaffaCakes118
Files
-
d2a5a25f8152a83abac662f73b3cff1a_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE