Behavioral task
behavioral1
Sample
db25403a6741c12bba4bca11b8743a39_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db25403a6741c12bba4bca11b8743a39_JaffaCakes118
-
Size
221KB
-
MD5
db25403a6741c12bba4bca11b8743a39
-
SHA1
02e733f29eb98610a520f7e10e7d8c6209cfd423
-
SHA256
0389a8274a3e74f9413b89a8974f83667c68953a49aa023df256d925dde0c20f
-
SHA512
6b4b0747123ffdad40180e72b6d8707b30c226e5b78ef06bf37c242be71ec180043ede96b7853b228474c7eb4b2598e5e972a8713aee67352ecb14dc5b4a223d
-
SSDEEP
3072:6v61OtG3Mh84YKXVex76N/+TEJNDd6DJGzapaIYH0fxfq3RbH6+1WZMSeHi770zg:tPcFYKXVa76NWTKNDTcCemRbH69BeCEc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db25403a6741c12bba4bca11b8743a39_JaffaCakes118
Files
-
db25403a6741c12bba4bca11b8743a39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE