Behavioral task
behavioral1
Sample
dccd23cd1b2d6af40ab0cb6babd7d040_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dccd23cd1b2d6af40ab0cb6babd7d040_JaffaCakes118
-
Size
784KB
-
MD5
dccd23cd1b2d6af40ab0cb6babd7d040
-
SHA1
088870600ca2da8b9ae3c432c530e4fc218a8ccc
-
SHA256
6ec2b4a1c7f6199f1c47d1fe00f03bc836319d3c569e2bb8813142b468830d9a
-
SHA512
2ac814f61dc79ff599e5a9f6a2894c6398882c42e5e13cd0f6e298cb32560371b63fc58e9120c8ce1742c6b77eb8668c47aaa49eadde7af8c873c1992124cafd
-
SSDEEP
24576:foZvTxnv7eLtEOk5N+LaNqDBv30DiwfsJR08:furxSWPN+WNa30eYs7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dccd23cd1b2d6af40ab0cb6babd7d040_JaffaCakes118
Files
-
dccd23cd1b2d6af40ab0cb6babd7d040_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE