Behavioral task
behavioral1
Sample
dd276fe5969a18798455daa79ca7c7e1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dd276fe5969a18798455daa79ca7c7e1_JaffaCakes118
-
Size
45KB
-
MD5
dd276fe5969a18798455daa79ca7c7e1
-
SHA1
2472d15872ca55d713041224f89e601408636a1f
-
SHA256
d16ced5678da6b5d14e255599749523802950a4c146718c56004cc8c7128a060
-
SHA512
8997ece748563d05c6b2f2524daec95f952fb4f172b6416b994fdd73db20039fb3942561e5bdbfad0c5c884c8551dabe601b141867d9e6b1fcb93e7af4e00eaa
-
SSDEEP
768:G/mM7QlI/AHrAG6WPOHyfR1A5W+iS/Ziowwd8ZB/J+eA4gCS9jLK:LtIIH0G3GHyfRP+5nwweZB/j+C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd276fe5969a18798455daa79ca7c7e1_JaffaCakes118
Files
-
dd276fe5969a18798455daa79ca7c7e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��X0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE