Behavioral task
behavioral1
Sample
d6536b3c864896072b06da9d114ca1f3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d6536b3c864896072b06da9d114ca1f3_JaffaCakes118
-
Size
64KB
-
MD5
d6536b3c864896072b06da9d114ca1f3
-
SHA1
b0ebb07da0c4592ca3d88e7b478c4f5309892e03
-
SHA256
522e6334dc12f3f35e2639ba12eda89760839734cbbfdbbb4ff8bd030927f13c
-
SHA512
b680371de3aa737aedc54e2cb80a5b4ad35eb6920a04504d2326323e72e924927c5d8829a51dd3836a1ddabd2798106c44a927c70ea77a84435117e2df74e567
-
SSDEEP
1536:8f9KFfrXYEJLoEm/Duq8hi5n2thxW5uYDPF22F:0mXYCLQbudhq2vx8k2F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6536b3c864896072b06da9d114ca1f3_JaffaCakes118
Files
-
d6536b3c864896072b06da9d114ca1f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE