Behavioral task
behavioral1
Sample
d49a5030c848acaa51da6ddb5ca2d81c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d49a5030c848acaa51da6ddb5ca2d81c_JaffaCakes118
-
Size
340KB
-
MD5
d49a5030c848acaa51da6ddb5ca2d81c
-
SHA1
bfc6afb3b4dccce4a5d91425866c161a59122870
-
SHA256
18c2c0e408aa21d8e7008105cc07f260209c8cb5fa660da254bdb259a882c22f
-
SHA512
30615f39b9ad93c3e00e3bdecd4de7482849356ae00b911fa05ec4fca537cd1030896f6ac0a76dc0b6c07aa8179b145abddc4008e5e07371bf0eb59eed3b8c92
-
SSDEEP
3072:lcIYVos6KRVLimePdbYpXXx0mojRyK2lhOvERXt:/YVos1ivepXqXFj+RXt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d49a5030c848acaa51da6ddb5ca2d81c_JaffaCakes118
Files
-
d49a5030c848acaa51da6ddb5ca2d81c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE