Behavioral task
behavioral1
Sample
d65a23104e98dfe8d4da74908e4fa019_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d65a23104e98dfe8d4da74908e4fa019_JaffaCakes118
-
Size
643KB
-
MD5
d65a23104e98dfe8d4da74908e4fa019
-
SHA1
1ae676d2a63d6e8c081ae8fb7fc2a56707abdf6d
-
SHA256
afc26cf525dc5eb330e6d9f6462eb5264bb9cfe63bb4d244f20c9a2465ff4f9f
-
SHA512
5cba4314aa34d8843f0a71e3ae08f319418ae8fc3fba16f9d9b31b56b5d40f35a1ebd5d569318bc38fc3c7bbedbbdbc8ed69f5896e9d778ce39e24d390943f0f
-
SSDEEP
12288:w1K7whDtPA7nBICe7NWwxhzrXIo5fHfYTJyHDKqdE5mGumM4V2I5X6BHX:wYqBobyZxlrXIqgTiDKcQlumbVP5qB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d65a23104e98dfe8d4da74908e4fa019_JaffaCakes118
Files
-
d65a23104e98dfe8d4da74908e4fa019_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE