Behavioral task
behavioral1
Sample
db4cba8fa9fd642eab30d7101ac746c3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
db4cba8fa9fd642eab30d7101ac746c3_JaffaCakes118
-
Size
30KB
-
MD5
db4cba8fa9fd642eab30d7101ac746c3
-
SHA1
1aaaf20bee012631e8276ce0156a41d19f4833d5
-
SHA256
a09085b45d7b3597210eda11d54ec699fac89a7898bffe399f878c0fc4ab3573
-
SHA512
6b98cc5f32c72af5b89b2c7aa4729860c441732e2081fd05f2c50392cf0b506b8b16ea7b9e22507f18cdc06f7852e1b72bcdfd4baf902752db206b1b47dbe156
-
SSDEEP
768:RGcAPQIpz0Mb18Kdt14yvLhlMdNnbcuyD7Ucp2XAJO:13TMb1FpPt2dNnouy8cJO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db4cba8fa9fd642eab30d7101ac746c3_JaffaCakes118
Files
-
db4cba8fa9fd642eab30d7101ac746c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE