Behavioral task
behavioral1
Sample
d43d21c1cefb9d2191d0d51888de1302_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d43d21c1cefb9d2191d0d51888de1302_JaffaCakes118
-
Size
143KB
-
MD5
d43d21c1cefb9d2191d0d51888de1302
-
SHA1
ed906ec517e04f17e6fdea61a0cae59da41ec158
-
SHA256
560e78fb048fb16266bf1aa9a2fe4226949a75de3b827850e8d7cb471435ed90
-
SHA512
84040cb4b316a879063a267a85d98f8f9d5366c9fc2ff235def80154977c0e50313320a133755a8d325b55d3fb880a1150ed5d6ae018a598ad22f5cc5241dd73
-
SSDEEP
3072:MgN+Ns5uUdzh5vaBAzmeu2ZN3PRp6hIAsdxn6sM0TZMl9V:ZN+quUdzh5vaBAz5NZkhIAsdxn6sM0Tc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d43d21c1cefb9d2191d0d51888de1302_JaffaCakes118
Files
-
d43d21c1cefb9d2191d0d51888de1302_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE