Behavioral task
behavioral1
Sample
db6b11e080a0bc7ac691aae749ac7971_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
db6b11e080a0bc7ac691aae749ac7971_JaffaCakes118
-
Size
8KB
-
MD5
db6b11e080a0bc7ac691aae749ac7971
-
SHA1
b0f35bb26e87f14493743efb5fe23f154beecbbc
-
SHA256
a85b7628342cd43220f3f4283a85e897e2a2c363d605e774916a94607a8c2afd
-
SHA512
238b558f7b52424ba740adc1d1063cfe19f47d8f9557c96f8caaa57a03c7205a84b8bbd2822de24ddf7fd06233c8d8d86dd1718785417928f89bf1fb3ba2408e
-
SSDEEP
192:z3d77YX7KqQvaCPtj2lC/FaNJhLkwcud2DH9VwGfctlnO:zGVy5PEqaNJawcudoD7Ui
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db6b11e080a0bc7ac691aae749ac7971_JaffaCakes118
Files
-
db6b11e080a0bc7ac691aae749ac7971_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE