Behavioral task
behavioral1
Sample
db5dd3002958cf61291fecf31941a429_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db5dd3002958cf61291fecf31941a429_JaffaCakes118
-
Size
413KB
-
MD5
db5dd3002958cf61291fecf31941a429
-
SHA1
e718ed220dccdab97d3428740b38f0feab45d3c2
-
SHA256
f442b3e0c4f51e62caf7379d60f13285f9dbf570a6a141b10e389ae9af3a3e5c
-
SHA512
1443d4352af98f410c604a80ac715d71e269b60349bfd69254f03d7f21f05638f274eb2d0a277cebe499f78d5a8b8b4ca43256455b379ba529f1dd1ea4ba755e
-
SSDEEP
12288:gx0L1e1+sztEFXdewVNNiHGuEUL7Jfa7nIC:gx0L1qEPeWrNg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db5dd3002958cf61291fecf31941a429_JaffaCakes118
Files
-
db5dd3002958cf61291fecf31941a429_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE