Behavioral task
behavioral1
Sample
dc7b0a929e2d7bbf4fc8316d6375e862_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dc7b0a929e2d7bbf4fc8316d6375e862_JaffaCakes118
-
Size
784KB
-
MD5
dc7b0a929e2d7bbf4fc8316d6375e862
-
SHA1
f7020fb472b225fe26f0cee274326dc9c93af6f1
-
SHA256
0246768a756bbd56ed1eb52d70f44de6ecb41d418925fa84f6977b04cfab394c
-
SHA512
6e23c264858348718b7f3cbb18547ccacb0cc12d177a947322619f7c36b8369515d8e24fe432549a48552cc5c82cdca50e01db2bd9bb2767f4b2ac07f6cad190
-
SSDEEP
12288:RVISINE8QBsbmi8baBVTi+WnYMULbo76zQ6bzTOyA9hh4PQagI:L5II5baBvEdubHbHTA9hhd2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc7b0a929e2d7bbf4fc8316d6375e862_JaffaCakes118
Files
-
dc7b0a929e2d7bbf4fc8316d6375e862_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE