Behavioral task
behavioral1
Sample
dc75abe670a3cbb15cf8ffd96d4a209f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc75abe670a3cbb15cf8ffd96d4a209f_JaffaCakes118
-
Size
784KB
-
MD5
dc75abe670a3cbb15cf8ffd96d4a209f
-
SHA1
d5d01ad3611edd49a8cda325be327a39fbfabbf7
-
SHA256
f2b4a9c80c9f6304562e94205baa469a0b008c47c77c3882d8c31593ec0c04a3
-
SHA512
b99773889ecd531f03f7397faa40b5eb5e48ea2ef3176fcc91aae832437a8337eb45b29a38dd6ba7ab33f041a70504ad281ad215422c27c13ea5af4639e20232
-
SSDEEP
12288:BTiqyIJfwdGgpWwGiVFAYtvhs5qe+qAV59XbO2y0E1aF2T3ukIqzmNpxxOP:ggfwYwvLAYdi5qebAj9k0E1aFWEpxU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc75abe670a3cbb15cf8ffd96d4a209f_JaffaCakes118
Files
-
dc75abe670a3cbb15cf8ffd96d4a209f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE