Behavioral task
behavioral1
Sample
df1dacf7ebc2ae953e2dd468bfca233d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df1dacf7ebc2ae953e2dd468bfca233d_JaffaCakes118
-
Size
106KB
-
MD5
df1dacf7ebc2ae953e2dd468bfca233d
-
SHA1
bebede97a107a670c9ae7c78073b69a72b8c0ca0
-
SHA256
41bc3537f56eaa957bdf2accec4b4f6fd052c32a92aae9ee1bd11c44bcec2920
-
SHA512
f6fa10b6c77aa415c48e372a4c7cef89350fd2cf277a52b3a8942391394dab47f86491af62f2b322e88d11262098c750eb65a3ffe72fbe7334dd6d72abd0aced
-
SSDEEP
1536:PC5oFtL10623T5JHbffpbnwQ0bXU5a8wclcQRSXBTS:PC5on1eLfR7I2wclcWSXs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df1dacf7ebc2ae953e2dd468bfca233d_JaffaCakes118
Files
-
df1dacf7ebc2ae953e2dd468bfca233d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE