Behavioral task
behavioral1
Sample
d4463453252a2b0d2584c0ddb18cb17e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d4463453252a2b0d2584c0ddb18cb17e_JaffaCakes118
-
Size
511KB
-
MD5
d4463453252a2b0d2584c0ddb18cb17e
-
SHA1
788f6f82c7d85315ac9ac527408a15f7929082c2
-
SHA256
bc93e1d9cc4537d3084b7ffcda2d5eeacfc99d6bdab1370b2312d9f93b10931c
-
SHA512
e1d68c21bae1014f8d80edbf6bb3c813d9c58fe2321ff10359e9737620e4b78d713226b46442a3e810df562edeb45d2e20d0a9057d4db8f023320af95c1b78e1
-
SSDEEP
12288:Ut7u9teQGFaUc8KVaaX7AzkQkUaymTIxaNe0xoS:6geTcUtKVnYyyuIx0e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4463453252a2b0d2584c0ddb18cb17e_JaffaCakes118
Files
-
d4463453252a2b0d2584c0ddb18cb17e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 501KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE