Behavioral task
behavioral1
Sample
db1e23472ea0dfe457381eb838344c0f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db1e23472ea0dfe457381eb838344c0f_JaffaCakes118
-
Size
32KB
-
MD5
db1e23472ea0dfe457381eb838344c0f
-
SHA1
b260f7a473892f559be024b9d8fe6b20a9afa771
-
SHA256
22595c4541f244d613b8e81fb2ecd73ddaf836ccdc7d6121187418d1faa783f9
-
SHA512
3d05fbc4185b22fddfeed460081631944b2d7cb876ade90d7546b500dc32447fa5efe981e834e7a5fa88b2c5fecddffa869c2fcd43f2e27e44841dff3755a8a4
-
SSDEEP
768:z4gvVrqnanuCu97OHJbs83h8z7ZeQrXRK/3vq3Q0h56i:pdroquCI7sOz7gn3v4Q0h56
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1e23472ea0dfe457381eb838344c0f_JaffaCakes118
Files
-
db1e23472ea0dfe457381eb838344c0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE