Behavioral task
behavioral1
Sample
dd34b47673f15387d9a2a3d6c8fab3f6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd34b47673f15387d9a2a3d6c8fab3f6_JaffaCakes118
-
Size
61KB
-
MD5
dd34b47673f15387d9a2a3d6c8fab3f6
-
SHA1
3e682a158f93e19a00eb1030c61e1d1379496fec
-
SHA256
4f7f266a3b16980de2ef6fe256c199ce121b084f96332bed165a13a44200d293
-
SHA512
34457b66995bea4f5a813d1951b83a1dbb1161bca3d173be7fc9250f00ee28b6a9e5f78a6ad6d879a06a24e3b2fe024fc5149546a2bad012d906760e6ac4d479
-
SSDEEP
1536:a3qCkxP2N3tN2+m2MWlVryZNhlBWWICK/1nouy8AEY5qnXK:a3qDPCnMWbrQhHWlx/toutALInXK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd34b47673f15387d9a2a3d6c8fab3f6_JaffaCakes118
Files
-
dd34b47673f15387d9a2a3d6c8fab3f6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE