Behavioral task
behavioral1
Sample
d9f45ca56cc4e1db065f53bb1a61a2e9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d9f45ca56cc4e1db065f53bb1a61a2e9_JaffaCakes118
-
Size
59KB
-
MD5
d9f45ca56cc4e1db065f53bb1a61a2e9
-
SHA1
7c85e0fa1ce5cf2cc839a8e7d1de42bc16e5a2bd
-
SHA256
5be5ff08ed01bb34e8357937cf939e5760aba6dfaef7ee50654bac313305e40d
-
SHA512
0a8c8bae8febe620c9710e5410ca57e96e7f410739eae9190625ad4677a7c74b3f1b6c79046afffbd42f120f0c58385973cbceb2f7967ec1ebe568ec793cf83d
-
SSDEEP
1536:MbXPFYhk/kCaiRj38nZh7f3pkprrf46yRmVHpXvcJOZlx5:OPF26oh7fWprEPgVdcJOZh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f45ca56cc4e1db065f53bb1a61a2e9_JaffaCakes118
Files
-
d9f45ca56cc4e1db065f53bb1a61a2e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE