Behavioral task
behavioral1
Sample
daa783c387c9bf8c64e69f7194a4f320_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
daa783c387c9bf8c64e69f7194a4f320_JaffaCakes118
-
Size
7KB
-
MD5
daa783c387c9bf8c64e69f7194a4f320
-
SHA1
c95050261fa97d0cd453bd7717ccd9f1b9ae7dff
-
SHA256
f087821eb07ae0d0c384f68768ec71f3ffcb437165409b176527ec9f8766465e
-
SHA512
cbb7319e43daec27857cf6748491c33db201857e63bef6f2c79c72668841b8c053f6dead0812b27e89acd8e215abaffddefd224735387650af4f53aa34036c9c
-
SSDEEP
96:pwoDmJySFgvwVqLXAYu2yk1r9y/018m7SCVjC4jlXtcNrfEbYigrI0uAlQFLfQ2Y:p3mwS+vw+1by/0137nl/7wrRciQFHo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daa783c387c9bf8c64e69f7194a4f320_JaffaCakes118
Files
-
daa783c387c9bf8c64e69f7194a4f320_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE