Behavioral task
behavioral1
Sample
db3b0149d23b54b9128ccc0b7e10e799_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
db3b0149d23b54b9128ccc0b7e10e799_JaffaCakes118
-
Size
4.7MB
-
MD5
db3b0149d23b54b9128ccc0b7e10e799
-
SHA1
f2428b24db506bc90101b14dc9d202dabc0b1662
-
SHA256
43627f7de4f4090d65251f63584aa658c76f494fdafb4e1cea172afa62f1e297
-
SHA512
3cf66394462424ce07c1e3f58455e9d7c0b85e7d9c82b18e6861fcadfa6f3f145f7396a3b4a43c1d48a72239f3fec59bc3e88cf869dfcd1317b235380479ab83
-
SSDEEP
98304:TC6Qy6r3jIdh0TVmtavHZl9t3sGPmF6NrsiMFyCG64ZUnU7T:LX6rzw0TVzv56X6NsPftU3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db3b0149d23b54b9128ccc0b7e10e799_JaffaCakes118
Files
-
db3b0149d23b54b9128ccc0b7e10e799_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE