Behavioral task
behavioral1
Sample
dc252c0175d2dc580a8ccf8e30d945d8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
dc252c0175d2dc580a8ccf8e30d945d8_JaffaCakes118
-
Size
76KB
-
MD5
dc252c0175d2dc580a8ccf8e30d945d8
-
SHA1
a311b0d0346855eac962f8698db44ac1d174801d
-
SHA256
2b64c67b346d21493f0390152b32ba6a622ad0a809b37a985898cfecc7cd6bc8
-
SHA512
3ce3a20889a484a3fc878e552d4131fac3c9c4618c4446d954f5a898382f1310a0bb8d996b1c6c89c19bc5174fa6203741f5f81ac423bbaea6bbfc46417e0cd0
-
SSDEEP
768:AozbcRrS6CPt3X+3QHoR9nbzjD2HNVNmrkTm8IESSmXduxh8rDS:hbz6CPt3u3QHoR5z+H928mTESxNusru
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc252c0175d2dc580a8ccf8e30d945d8_JaffaCakes118
Files
-
dc252c0175d2dc580a8ccf8e30d945d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE