Behavioral task
behavioral1
Sample
dcda149b6f20db69969df1e8729e0b2d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
dcda149b6f20db69969df1e8729e0b2d_JaffaCakes118
-
Size
70KB
-
MD5
dcda149b6f20db69969df1e8729e0b2d
-
SHA1
738c4e14e58b1d90b6d8f2d00d974872d936ce73
-
SHA256
456389aefe1f9f31a46e4c8ffb80c160a5b17456be9c9717d9bf60b0bfec481b
-
SHA512
29e3ec604d386e70ba3eadd79ce1b0e181ae658fc183a200e62d5bbb3bf721cfb7a32e32b10f3d936eb09446ead8155043eb2ac0b0df1c769541449f8cea143c
-
SSDEEP
1536:aASPdv9wi49i7MGA0o2cBD6/p3YbyqCtk0ko:apdv9wiei7KZtBeYbwtk0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcda149b6f20db69969df1e8729e0b2d_JaffaCakes118
Files
-
dcda149b6f20db69969df1e8729e0b2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccrypt Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE