Behavioral task
behavioral1
Sample
da5b2cb453bbe37122abc3fec3a29852_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
da5b2cb453bbe37122abc3fec3a29852_JaffaCakes118
-
Size
204KB
-
MD5
da5b2cb453bbe37122abc3fec3a29852
-
SHA1
976ae192160d2154a41fa400bfbbeab4c97c1aea
-
SHA256
580407e4a5edddcd224d8730d18a1a3d0ec145778cea5ae48f5ef88773f5d183
-
SHA512
4dd7ab490cabb45a96b16ab0e4f36a632b392b32b3986e633e4fad4d0b4eaac7dec291a0f560f28d230f06acbefd30d32c3d25aa1c3f351ecbf0406319cb6b62
-
SSDEEP
3072:hJOFg2GucAU46gNAfTHaMyOv4PD30xjPE4setnYjCuNEDPQhij1AjofzK+0b:7Kc8NATyOv47300e8C/P5Aof2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5b2cb453bbe37122abc3fec3a29852_JaffaCakes118
Files
-
da5b2cb453bbe37122abc3fec3a29852_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE