Behavioral task
behavioral1
Sample
d9e1d7a7ef6527b270c45a8bff8591eb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d9e1d7a7ef6527b270c45a8bff8591eb_JaffaCakes118
-
Size
58KB
-
MD5
d9e1d7a7ef6527b270c45a8bff8591eb
-
SHA1
238ea275b81f4eebf3168a6aa1ba436e91461910
-
SHA256
5ed5660c208435c5a64a48e96cc73bc843238f898ef5427e066ea4f5a5ededdf
-
SHA512
8fd5f7c5259f042ef0aee9c82fa55bf6fba8a57ca5d64ccd1a262568babd4fac8b8db0a98efd20a15393e185485d73e755c227dc9ab93abe780d8ef74ec1ddf3
-
SSDEEP
1536:vNuD/IjHNvGhSm+cANGvGextloC5kwVqBVsmSMvl:vNurovySmvANGbxtloC5zMHt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9e1d7a7ef6527b270c45a8bff8591eb_JaffaCakes118
Files
-
d9e1d7a7ef6527b270c45a8bff8591eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ