Behavioral task
behavioral1
Sample
da2d38cba75528d436c633953b763e0d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
da2d38cba75528d436c633953b763e0d_JaffaCakes118
-
Size
379KB
-
MD5
da2d38cba75528d436c633953b763e0d
-
SHA1
e733402fe1a596f43b96cee2878f3d498910f37b
-
SHA256
cfe82f21e612a3aaf071216b6e934619f11a63f5dcb55c95be531435147bb9ec
-
SHA512
8c207d58a9ce2a850c4a8342f6867abd3e7c1393a81e649d1574117be87f793fe080d1fdf4c4bce62775ab811a0ada3b28406e618ae720a22e7b7e533900c6c6
-
SSDEEP
6144:9+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LE6:ps03z8tgkGJRxpw4osO2JoS0LE6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da2d38cba75528d436c633953b763e0d_JaffaCakes118
Files
-
da2d38cba75528d436c633953b763e0d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE