Behavioral task
behavioral1
Sample
dabd485a44ee189be2db0a917a9a883a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dabd485a44ee189be2db0a917a9a883a_JaffaCakes118
-
Size
9.9MB
-
MD5
dabd485a44ee189be2db0a917a9a883a
-
SHA1
912681f60eb60ace921dee5922ca213ec94894c4
-
SHA256
2e1fd498221573adf1a9676d593ffe68272169d1142304ec285760c838ac90ed
-
SHA512
48ac03a6f14a3c54377d9987ef8fe779274ee2d6d8046caf046caaaf33e06346e63f82ca63411a4fa0c0bce9686cbc083951fa6a3461d8b7b1830af2affc5ca7
-
SSDEEP
196608:M5RmAIbc2nuR5ac7y73hZ9NekED9ugm6PmrCoYPUFxo0lUo:ojIQ2nuR5ac7y73n9NedAgm2mWotPo0x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dabd485a44ee189be2db0a917a9a883a_JaffaCakes118
Files
-
dabd485a44ee189be2db0a917a9a883a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 601KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE