Behavioral task
behavioral1
Sample
db7f836a6db01cec89c29504cdfdd9a1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db7f836a6db01cec89c29504cdfdd9a1_JaffaCakes118
-
Size
134KB
-
MD5
db7f836a6db01cec89c29504cdfdd9a1
-
SHA1
ad09d5d46ac1a63d5114b55f0297a31b1bd344b6
-
SHA256
e562eb771c75f5428ea547ea5598ea66f9cd0a59f4e504dfb2b3ce07088873a8
-
SHA512
58daa8a01fb8e33ffeeb9c273adae3eb87356b4a52111b3df925f90c0f870ae8df2e956f378d1075e64eebfcbe548f3bfb8aaa2b891950358780e8a08f2bbea5
-
SSDEEP
1536:6SQ2C9GGCJ5q4RJrht8Szo7vc+LAp7Aq:6SQ2/G+o4RJ9t8SIv5Ep7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7f836a6db01cec89c29504cdfdd9a1_JaffaCakes118
Files
-
db7f836a6db01cec89c29504cdfdd9a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE