Behavioral task
behavioral1
Sample
db33bed95a8b4fcfaad15a158a43dbe8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
db33bed95a8b4fcfaad15a158a43dbe8_JaffaCakes118
-
Size
459KB
-
MD5
db33bed95a8b4fcfaad15a158a43dbe8
-
SHA1
0847c3592ac0656bff9d107ee35438585056031b
-
SHA256
95190079de1c969569305267d58256c952a8965f9fce3938f1c46f414517edbb
-
SHA512
e5b82c56cb6e7406f59914b5b99c4e61357efa6099f3bd017b5f18230f4b5393ab9b8869f9a971f8834daeffff615bf9baff84ad9b72638a83453c3656c9b076
-
SSDEEP
6144:j+7CcSJzOGT/2oHnsUTMyXxavz4+aG1Wj8FcNMcFxXz7Rj75SodSA95rZEu/VA8d:6CjmzcFh3SzA95Nx/SnMuvMcNo2q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db33bed95a8b4fcfaad15a158a43dbe8_JaffaCakes118
Files
-
db33bed95a8b4fcfaad15a158a43dbe8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ