Behavioral task
behavioral1
Sample
db87fdae096b265eec21804309602f71_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db87fdae096b265eec21804309602f71_JaffaCakes118
-
Size
459KB
-
MD5
db87fdae096b265eec21804309602f71
-
SHA1
adad0a2702ccc0528f72e9f70a93973b0764ce32
-
SHA256
5a5cdd0053171a4f350b5df92eebf68fce3df87c9c6a836e565f66b2762d0095
-
SHA512
5da5ca11a47961c85d7c1a0aab8975f544f224b132c11542f82adb8123a39b3a13cebc8a02e561d827a5a88101b9ec137800dfa9128b52336f327834e2cc976b
-
SSDEEP
6144:COU9usUuZOHeSIOhVNHu/KT578L+7MnesD1cbkUF5rELNmlOU4Ar116+Yvx:aUuZO+STpu/K1ADRmbkkJ0VU4i1uvx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db87fdae096b265eec21804309602f71_JaffaCakes118
Files
-
db87fdae096b265eec21804309602f71_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE