Behavioral task
behavioral1
Sample
db0161a18d637b359323e43cc5cba65c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db0161a18d637b359323e43cc5cba65c_JaffaCakes118
-
Size
414KB
-
MD5
db0161a18d637b359323e43cc5cba65c
-
SHA1
6e6bec5b6b7029580a419b3f6b0518dc75c15d3a
-
SHA256
1f72c2bcddf87373252c7143d58efc7cad455497ae8dc07cb6131ff273867d5e
-
SHA512
978d99d50c0d5ba02c71aecbb7d5587a2af240bbfc1ed30dbea63fc44a46e2caeba7d0174188862e062234e7cc3623d329da9e8a20e59b03d9c62c3625ad9cb7
-
SSDEEP
12288:Jf01siVTgE0Vkh65b+o2On3vskbN6pefGwoS:JqsiOE0KhidfsON2efG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db0161a18d637b359323e43cc5cba65c_JaffaCakes118
Files
-
db0161a18d637b359323e43cc5cba65c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 406KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE