Behavioral task
behavioral1
Sample
dd047ef90a2a13255c35bd93ad097480_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd047ef90a2a13255c35bd93ad097480_JaffaCakes118
-
Size
128KB
-
MD5
dd047ef90a2a13255c35bd93ad097480
-
SHA1
354995bba7bb8e6f8fa8355b5c4560348144d811
-
SHA256
7e66f0b4872fe96fd0031b53cf307f0754f75b05cf05f1c0fd00729ca97b2d78
-
SHA512
78075824d7d374207414b9172ab625e21be605b1778dc2199eacc21fafe0f6581cdfd654801b9c99eb77c80f3703aff3f79a94ae27c553024469a0ea8876cd09
-
SSDEEP
1536:CS8oQLGGPNulPMWpzGlarTRkwl61w9o0GdoMhDy/n2LS:C9nPstEl8Cw9o0GJDy/n2W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd047ef90a2a13255c35bd93ad097480_JaffaCakes118
Files
-
dd047ef90a2a13255c35bd93ad097480_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE