Behavioral task
behavioral1
Sample
da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118
-
Size
6.1MB
-
MD5
da71708b7b9ab59308a89c73ce99c1a9
-
SHA1
5b06cc7cf23950019881093721a761de44220519
-
SHA256
ceb37386180a22b2dad5a1628659c9f526200390729835f539a9f0147ca4ebde
-
SHA512
31039b04a7f32f5bb6bb2d641ceab6a5320761fae767075472788ba50751b4ba9f0a67dbd6b649c78ba508bc1ff37dc7f8d72b0b8eada4f77eeeaecdf66339ab
-
SSDEEP
196608:QxfipLtftjz3oFbgPEfzA1TMd5sHP0HiG:QxAYFsP0A1TO+vPG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118
Files
-
da71708b7b9ab59308a89c73ce99c1a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE