Behavioral task
behavioral1
Sample
db92ec9aa1e2cb0808b0d1e7c5a9875b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db92ec9aa1e2cb0808b0d1e7c5a9875b_JaffaCakes118
-
Size
23KB
-
MD5
db92ec9aa1e2cb0808b0d1e7c5a9875b
-
SHA1
f87aa4602cb3dac8b630a564c1b914ea7cd88492
-
SHA256
aa1e0b8ac9d900b2c156ba6ff3b65585996c67b50f1b337f17eecfb07272496f
-
SHA512
73f52cbbcd5f23c4d9ff8a51bacb69918e4d52aa7e95789f326479fbfd740f783d2879a1636a9001ed2750ca06a1c3e7151f2024f3721c4972cfd338c260d77b
-
SSDEEP
384:U0Nfc1rbCD7gzB1svE61e2xsXpizqs1svMTGc1Clwgwf29P92:UCU1rbCD7gtNmAizxskGc1CltnV2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db92ec9aa1e2cb0808b0d1e7c5a9875b_JaffaCakes118
Files
-
db92ec9aa1e2cb0808b0d1e7c5a9875b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE