Behavioral task
behavioral1
Sample
dd3744ef7528853f65b16eb0edf781c4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dd3744ef7528853f65b16eb0edf781c4_JaffaCakes118
-
Size
303KB
-
MD5
dd3744ef7528853f65b16eb0edf781c4
-
SHA1
0ccabd9b9e6020ff8cde1cc90c2047ef4fc224e7
-
SHA256
f8d8e1359c590fedd4cc8c3285087ae813939df43b3da2732b45db45841ce68d
-
SHA512
2227a27b308e3a8ed6ebf13bd08489aafb3ef30c36811cdc412ce27b3d980e520fc96a2ba0d87173ef3b5dbf43637501b60a6eefc61ea27e2ba95012528a6206
-
SSDEEP
6144:VPkCRVr04E4jDmKdGhJGsf31NuOQdOMZen+ZnbLVv17EMXNZRvX7wVweNp:CCU49PCzGWf2ygn517EMXNXXm1N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd3744ef7528853f65b16eb0edf781c4_JaffaCakes118
Files
-
dd3744ef7528853f65b16eb0edf781c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 301KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE