Behavioral task
behavioral1
Sample
db205be30dd1331fc62c3587f76c6b60_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db205be30dd1331fc62c3587f76c6b60_JaffaCakes118
-
Size
784KB
-
MD5
db205be30dd1331fc62c3587f76c6b60
-
SHA1
f84c07e52e46e5d751f0aaa2751f0980da92dd19
-
SHA256
efd499de3a566e91cabdcdfa8fd8512638d2265f8a4dd7bcffbb1cffc29408ab
-
SHA512
4ac61c0b7e363143c540f3a77b94766d56d641e25a2b57021f3ca3cd9c5a44feb460aff677f43c85c0f3bdd522c57d5678ae2b8c7f76b05c6481b17769b90bef
-
SSDEEP
24576:DqMleZYuFbg5ir/ndGuHxz3APhXtCAb5JmC:OM0ZYuFweYuHxzQPptCo51
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db205be30dd1331fc62c3587f76c6b60_JaffaCakes118
Files
-
db205be30dd1331fc62c3587f76c6b60_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE