Behavioral task
behavioral1
Sample
daea1c703083583dd0ab4a4138dd1fd1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
daea1c703083583dd0ab4a4138dd1fd1_JaffaCakes118
-
Size
38KB
-
MD5
daea1c703083583dd0ab4a4138dd1fd1
-
SHA1
94d75433b556c1a882a9efd8d6e5650cf83eb682
-
SHA256
ed7cd7377af575d1a2e3e08764325c0dffffd209a658c45e1a90dbd52f1e7eac
-
SHA512
4410f3f8ce697b4b5b8ca5b42041adc77806ef5d3a982b80ddd05740e9d401057ef622e1b26b20a8b6311c45ff24a5aec234c39becea29502bad1ffb4ca2b833
-
SSDEEP
768:zLg20HVke3KX/i3Yi5F+olqbxA5tWZ1iUa0GSzj0:v0HqeaX/AVFjlru1iU10
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daea1c703083583dd0ab4a4138dd1fd1_JaffaCakes118
Files
-
daea1c703083583dd0ab4a4138dd1fd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE