Behavioral task
behavioral1
Sample
d502e58a86d3fa8253e6b1e22c4b9c77_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d502e58a86d3fa8253e6b1e22c4b9c77_JaffaCakes118
-
Size
784KB
-
MD5
d502e58a86d3fa8253e6b1e22c4b9c77
-
SHA1
a8208664bc884a749cd47e3b8153ced1cecc4ddb
-
SHA256
1faca1e1ee8f726c260e851cbbb3f2a324ed90848976ecc820ce3658f2b2a982
-
SHA512
4baf71b34676fe21176747b2c2d5e114dd09ec28bf0cd6dcd9af32104d90f2d5be698c075bae8cbe7fa999fee439b24f1abf3880b5992cc182327b150eb973ba
-
SSDEEP
12288:RvvLPoBUIXDvA/R3+26/2kKAQ4xFYFpt2L1hVZa3gOFvEtxCy3mHs7Ux7gwjYq8o:NzPovzY3+r2kbQScG15D3mrx7LYq86J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d502e58a86d3fa8253e6b1e22c4b9c77_JaffaCakes118
Files
-
d502e58a86d3fa8253e6b1e22c4b9c77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE