Behavioral task
behavioral1
Sample
d9a1042bc566e2428e6825996e2d2b65_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d9a1042bc566e2428e6825996e2d2b65_JaffaCakes118
-
Size
306KB
-
MD5
d9a1042bc566e2428e6825996e2d2b65
-
SHA1
992822c8badd2aa4d65c0e3d0bfee2f557ef5b1e
-
SHA256
7ec3744563a83c0f76f7b6139d62f7c421a893e59018da2b4ecbf97078a901ea
-
SHA512
26a5e81e2499bd6e3e3842a05632c717b15fcfaadcd248fe6d1310a0f8a0bfb2bd34742b61136172fa8bc79a95bd0e56db38ff7036386b0ed3b75500d1e6a53a
-
SSDEEP
6144:uhdnr1a1vUxAlzfA5yyTtVjZnP5CIRVJi5mVFXLTXEMl7GYYaUoSLYK:qdnr1LQGPTBPsIRVJi5mV9TibaUoSsK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9a1042bc566e2428e6825996e2d2b65_JaffaCakes118
Files
-
d9a1042bc566e2428e6825996e2d2b65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE