Behavioral task
behavioral1
Sample
d599ed06422eeb82266348c4fe69ecdb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d599ed06422eeb82266348c4fe69ecdb_JaffaCakes118
-
Size
184KB
-
MD5
d599ed06422eeb82266348c4fe69ecdb
-
SHA1
e37c6823a840dbd1e0598995cbed33482abc2dc3
-
SHA256
20e42bedc861c559d0d981ea5c246f72facb06a4d619b69a1966f3cc6913b868
-
SHA512
b14b81491d137e8e255bb6e225b4ad3df60c1b3a7bd1feb2e10b685a6370a433cc90a0c9718cf333323e97ec1766b8857d4f56aee3c1cafbf2c072438c40648a
-
SSDEEP
384:MQvdzTPkCLhfnWNGCLhinWHlNdO+LeowCh4j8JYXQAi5s5D928f:1vdPPkCLdWNGCLkWFNdO+SCh4j2sY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d599ed06422eeb82266348c4fe69ecdb_JaffaCakes118
Files
-
d599ed06422eeb82266348c4fe69ecdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE