Behavioral task
behavioral1
Sample
d5c2bde4c6b8e37fd19f9f99c839bd3e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d5c2bde4c6b8e37fd19f9f99c839bd3e_JaffaCakes118
-
Size
392KB
-
MD5
d5c2bde4c6b8e37fd19f9f99c839bd3e
-
SHA1
176cc53a19c318141237912cd33f7d4f87250382
-
SHA256
240b6ae91f7b0f2df95db78b53d93fbed72e75c5a4eb5b11fd75260eff6f63c8
-
SHA512
b7751b507d5138d7477553375546e36cfc671f7566b21a5e3cecfbeb069dda06ce26db1797e15306bda2e52f7b6663ae496a137ffc85e6e28829f3c311dc08ab
-
SSDEEP
6144:LmUaYz9kYWaGSgL6gM503iQGbug41PEDUqmjyGHyOGwoUHX2yCnyiYF:aUaY5kQGR6gMS3iQG02Dx6pGwoU3gyi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5c2bde4c6b8e37fd19f9f99c839bd3e_JaffaCakes118
Files
-
d5c2bde4c6b8e37fd19f9f99c839bd3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE