Behavioral task
behavioral1
Sample
dc8bf1b5d33ee3a05d7201becf75371d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc8bf1b5d33ee3a05d7201becf75371d_JaffaCakes118
-
Size
784KB
-
MD5
dc8bf1b5d33ee3a05d7201becf75371d
-
SHA1
2f1faa4df272d1ea8130fa3c4bf941349c448dec
-
SHA256
2699d1f5144ba9c5436d072c8b7b54a59be6ac6b4303fce98020e086728e471f
-
SHA512
0b7d925eb90e938a47a7056765065a080707e851ae4b0ba608e83aa91c7c63f180bb79a88ba0571f729f218e0ee179e352ff9cc1b8b5ec15a6b152fddfd56dc6
-
SSDEEP
24576:j5a9kD3TceTctKNauyOf0r2Hc1bmLTCwurZEcy:wITceAg0OfQ7bmnCGf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc8bf1b5d33ee3a05d7201becf75371d_JaffaCakes118
Files
-
dc8bf1b5d33ee3a05d7201becf75371d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE