Behavioral task
behavioral1
Sample
d698dc7d4a51fba3044b275a875c906c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d698dc7d4a51fba3044b275a875c906c_JaffaCakes118
-
Size
39KB
-
MD5
d698dc7d4a51fba3044b275a875c906c
-
SHA1
28d5646d55c5544aab344bd9225272efb9e99c84
-
SHA256
c031e264d94a1420fc8144f08748c527a0e16a4ecf05705ad1e114ef1f84c46b
-
SHA512
1ddaf0efc40e0fbb40a20761b1871aa3df38bc741fe7ef3638c568c56b714eb0427dee779249e380276c97f1456d5aa947721543145cb0be17ea91b658a282a9
-
SSDEEP
768:adypjy7VsDlHj3Yrsgy1n7WGWYnbILbx23aWGqF/grRFXs6PwtuDz0u:aQpjyReR77PWYnb8biaqVYHXyMH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d698dc7d4a51fba3044b275a875c906c_JaffaCakes118
Files
-
d698dc7d4a51fba3044b275a875c906c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE