Behavioral task
behavioral1
Sample
d2cf7a11194672442af61dc9e65c3c19_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d2cf7a11194672442af61dc9e65c3c19_JaffaCakes118
-
Size
44KB
-
MD5
d2cf7a11194672442af61dc9e65c3c19
-
SHA1
73b1fdc19a7502b2d9ff98ee2e38af12ea11e4e1
-
SHA256
f5efb60f99ee9bf8fad45335017f2b56ca716e6b3651f3b578b5dfadbe99011b
-
SHA512
e45c46693ff08d77ff12d567930b98d4523948f4924281710a7bb8b8bdf6e33a5805be80bc805b62482dc579a289bc15ec6ad1f81eb63026ce72e1eeeafb0830
-
SSDEEP
768:BZCZtZ188np9auyiXZWgyvcPpRsX5d6O7fuaDFIRAGnbcuyD7UFCZmjzYnP7RhRB:Bg8SM+7P/sb6OzVDmeGnouy8FQKEFXv5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2cf7a11194672442af61dc9e65c3c19_JaffaCakes118
Files
-
d2cf7a11194672442af61dc9e65c3c19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE