Behavioral task
behavioral1
Sample
db2fac9dc519917d98d44f0a7d39d3b8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db2fac9dc519917d98d44f0a7d39d3b8_JaffaCakes118
-
Size
9KB
-
MD5
db2fac9dc519917d98d44f0a7d39d3b8
-
SHA1
4211865d6119e1c448d95147012c032afa504b5a
-
SHA256
b4c4825659e08e32dd3fcc325550937e6562f8c7701dc2f0ce0b822382cdf8b3
-
SHA512
d4ae4601c883ae518c52a4fcd080dc4168107316b5cc7633d1d4d9c75cc26d2849f403c15595a441975a1e057808ac0f74f3bff465a42979a6ef81f1893d895d
-
SSDEEP
192:DsMLckexlX2aUsLIzzl3nCRNw8ttKCkvB/:D0lX2aUsLw3N8/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db2fac9dc519917d98d44f0a7d39d3b8_JaffaCakes118
Files
-
db2fac9dc519917d98d44f0a7d39d3b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE