Behavioral task
behavioral1
Sample
d6e12c799c39399ee3c25d5c16b06dc4_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d6e12c799c39399ee3c25d5c16b06dc4_JaffaCakes118
-
Size
784KB
-
MD5
d6e12c799c39399ee3c25d5c16b06dc4
-
SHA1
83a995c7135982a2f9c1ab519c85eeda0b12b4a7
-
SHA256
774cf7fa351957b0757bc20b030e8a6c283a027a4074a32883bc78dd238bc692
-
SHA512
0129811db3b5a9ce8eb826e791df7f55f0d802e27e4aff6051a8aadcf481fa6e9687211f9f308bf57031f132d9083c361c72d8d6aff3fee3643d25d2cd8beb99
-
SSDEEP
12288:5G3FeUWq/NJNGPNe2Bp9FpNMaQ71KH2yOTJ2IFBtXhXbWxSEjPTc6GAH:52FEq/jwPNfhFLMny2rdZrQ7rGG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e12c799c39399ee3c25d5c16b06dc4_JaffaCakes118
Files
-
d6e12c799c39399ee3c25d5c16b06dc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE