Behavioral task
behavioral1
Sample
db7617a5a7c8a848a3ff71749e92f097_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
db7617a5a7c8a848a3ff71749e92f097_JaffaCakes118
-
Size
41KB
-
MD5
db7617a5a7c8a848a3ff71749e92f097
-
SHA1
963339dcdd1a5d28b0af12de370dd7b4e9f83f97
-
SHA256
fe34594a15920d032f7bf434706283e024e7b49356d1bd5e48c3fb4b0104beb5
-
SHA512
6620d7dd327ef447b421faa2bb4bc9373a3ea849f8b42256635aacdeb8e33043f9d4eef9b8013ef29eb4634b5da6d2588a0c0271d65bca9dbc7631fa29ff4885
-
SSDEEP
768:UfPiBYUFJoi3fwJlal8wYHGXbDIdxIcPF2hIve1jLcaJ2mp4A:P9wnalZMdSYXW1Bh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7617a5a7c8a848a3ff71749e92f097_JaffaCakes118
Files
-
db7617a5a7c8a848a3ff71749e92f097_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE