Behavioral task
behavioral1
Sample
d724dadfd0757ee89ab587ef8a567f1d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d724dadfd0757ee89ab587ef8a567f1d_JaffaCakes118
-
Size
96KB
-
MD5
d724dadfd0757ee89ab587ef8a567f1d
-
SHA1
7d89cd18d4cfff8cb07ffccc7fa7b86df291a7de
-
SHA256
af8ce54156b532b609587efd23037b9e509af2c67935ef4b1d1d32a4b1394233
-
SHA512
ed999c1d06ebab111b766f7e8abb29bb7e32e35f434de6809c9a2e72b8e7ff63ed1bbe20215d5a3100d37f827fce5f4b7c3bdc5e507ddaf6544f83e42d3cd89c
-
SSDEEP
1536:pT+sf9+5WmA+NWAKxFN1Gt5ztmNS+2jdHi2PLB8zCW3p7Owk7GAuVysba/zEJflb:9+sotmNS+2jdC2TMdRk7GAuVysm/z+h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d724dadfd0757ee89ab587ef8a567f1d_JaffaCakes118
Files
-
d724dadfd0757ee89ab587ef8a567f1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TEXT Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE