Behavioral task
behavioral1
Sample
d6e3c8230b991517677fe89a7800d00b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d6e3c8230b991517677fe89a7800d00b_JaffaCakes118
-
Size
138KB
-
MD5
d6e3c8230b991517677fe89a7800d00b
-
SHA1
1250e5d5077eeff71fecea77c24e5ec8e84e37ff
-
SHA256
cd5ef2e96003eedc52b2dde40a62604800db52b3ba0d1437ee5454d51fa0d8d5
-
SHA512
582473ed96e51e5537edb8cc1f8e79b13686b570f7586c3126a76baacb00b2fb481b4b5482d9ba55e380b3ca000392b673be8db8e3c2ef2f17b5b3455b064be5
-
SSDEEP
3072:xFa4I5CNuIB5piwRy3w4kvwwYubL+ifvgAb4XUrWqy9FNoutDM:xFACv5pZIw4twYub8Ab4XUru9LoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e3c8230b991517677fe89a7800d00b_JaffaCakes118
Files
-
d6e3c8230b991517677fe89a7800d00b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE