Behavioral task
behavioral1
Sample
db6e99b63de9148307a18204ead68b12_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db6e99b63de9148307a18204ead68b12_JaffaCakes118
-
Size
480KB
-
MD5
db6e99b63de9148307a18204ead68b12
-
SHA1
5eec0ed069bfd2f4a6a7ba716a85d52732e20669
-
SHA256
4809bfa7238b35a0180cbaf038cc8221a47e87382f3c5722440b707f5655c30c
-
SHA512
9ae31e3c52f5d5456f47db93667ccace2e7b47f51a2ddf47803d567c79529de05350f9ca41ee517edb7a444dea00d145d6baa481a5978093708a8556e9acd888
-
SSDEEP
12288:wn0Xl9XBBH+87G2H0MiNzyGwU+6NzyGw5IjUV:wn0XlbIXMiNrwU+6NrwKG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db6e99b63de9148307a18204ead68b12_JaffaCakes118
Files
-
db6e99b63de9148307a18204ead68b12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE