Behavioral task
behavioral1
Sample
d36049b16afd83816e583c2ab89a42af_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d36049b16afd83816e583c2ab89a42af_JaffaCakes118
-
Size
784KB
-
MD5
d36049b16afd83816e583c2ab89a42af
-
SHA1
dafdd64f328fd098e0227929823ac86a5ed5f93a
-
SHA256
a2c287eab65e1db117a496e870e5a40d6111ed5f1743d6a2619d2ec8cb1ec6f6
-
SHA512
be940e1236629d33c2abde8c998aabc53cdc3f4ab5091ec18ef4b49a03ed87028925d7341d8ace3aefff832dd37716bb4be4a55ab353c3877dfe4e282173519d
-
SSDEEP
24576:NXu+nOOtgih1PO9h0doKflvDr8Pxcb1Ohb:FbOO6CO9ooOlLr0cb0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d36049b16afd83816e583c2ab89a42af_JaffaCakes118
Files
-
d36049b16afd83816e583c2ab89a42af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE