Behavioral task
behavioral1
Sample
dc5c756aa59f8c1e2de3291573ec299b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc5c756aa59f8c1e2de3291573ec299b_JaffaCakes118
-
Size
56KB
-
MD5
dc5c756aa59f8c1e2de3291573ec299b
-
SHA1
d721299950699e4410328aeca63ce7a8eff34e67
-
SHA256
bedff02e19493a3633bf1e88f27f5db8f013df9c95d89a2e800ed259630d6a66
-
SHA512
7e43c4a12508d75ad2e8654276b726c36c8016cb89d9df45aad4b1dd82349e02b29a83297a834cd08d80122ecfde431e7ff16f2046f84dfba2f680bd4b767e43
-
SSDEEP
1536:rz2d8popoU1iYsYxwBoq3ym4fdem/ZCBcyQiySTR:jwoSxwBoqCm4V/QBcVHSl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc5c756aa59f8c1e2de3291573ec299b_JaffaCakes118
Files
-
dc5c756aa59f8c1e2de3291573ec299b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE