Behavioral task
behavioral1
Sample
d3cd4eca6e4478fd9e660892deae9eae_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d3cd4eca6e4478fd9e660892deae9eae_JaffaCakes118
-
Size
1004KB
-
MD5
d3cd4eca6e4478fd9e660892deae9eae
-
SHA1
71b14f2bf0912aafb52087db0c5ffe8a29cb04f2
-
SHA256
878cb690b042654f44a516fe9f6341ce5f9e566d3305c08d1600a876250724c0
-
SHA512
64883f0bbbdec783f12dffce00675c599cde3f083c6d500e1d4bbe8b3ec252e8f523c971a82e3927d0e5a1fcf074ba17b6122cc25d6f17fa2953a8482636ff2c
-
SSDEEP
24576:KOhtM91i1Z9ZmdBAt4yBXLNWyNYhN0lBEwPVvSSi7yp:ntM9QZrsBTUpWPhN0lB7PVdlp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3cd4eca6e4478fd9e660892deae9eae_JaffaCakes118
Files
-
d3cd4eca6e4478fd9e660892deae9eae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE