Behavioral task
behavioral1
Sample
d47645998bacef8fd853aead23478102_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d47645998bacef8fd853aead23478102_JaffaCakes118
-
Size
309KB
-
MD5
d47645998bacef8fd853aead23478102
-
SHA1
5b50a84121abdd798dd8bc80de2ec2c5821ed5d3
-
SHA256
782bbb8931121ad819e987dda05b1cb0d191868e8955d0a8925252931df37b2e
-
SHA512
fdc77c3ccb7f9b6b01983c3e64e0ceed44a7e210d255ccf6d48c2d8c448b00767645e810fc9697b06273ad6d0a5c00d12ba95963438b42d62f6fb8a4a4f3a71d
-
SSDEEP
6144:EdR6JX/v9ewIdc5npDgV5PC9jPbUNMRcooAsCkWXM6BcWSZoS:O4PowIW5RGQZTVRRo+XZcWgoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d47645998bacef8fd853aead23478102_JaffaCakes118
Files
-
d47645998bacef8fd853aead23478102_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE