Behavioral task
behavioral1
Sample
dc71cd4b0ec2de632f5c9f33d6476e25_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dc71cd4b0ec2de632f5c9f33d6476e25_JaffaCakes118
-
Size
132KB
-
MD5
dc71cd4b0ec2de632f5c9f33d6476e25
-
SHA1
d372bb30f7561d8ceb59e3ffcb375335790cc45e
-
SHA256
0303172dac220fc33ba5ff874ec686888a538705a4e3fd92e61e387deb8eb93e
-
SHA512
45b9944b6cd4d3823da75ed6c14ddd61d7d88c4e67e0cd5502148faedf1d25025da568fd7e007dc65b9f8c660d8adc90e587c2d1ad4f30b189f26317b8500428
-
SSDEEP
3072:3eimZ6OZhIAsdxn6sM0TZMl9VJdzh5vaBAzmeu2ZN3QVCX:OimYOZhIAsdxn6sM0TZMl9VJdzh5vaBO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc71cd4b0ec2de632f5c9f33d6476e25_JaffaCakes118
Files
-
dc71cd4b0ec2de632f5c9f33d6476e25_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE