Behavioral task
behavioral1
Sample
dd5a3bcea85835ed465d2908d818b070_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd5a3bcea85835ed465d2908d818b070_JaffaCakes118
-
Size
148KB
-
MD5
dd5a3bcea85835ed465d2908d818b070
-
SHA1
56eaeb6187cda44765fcd95f930135572f2d66f5
-
SHA256
73e0fbe03696b6bfc527b6c1365c05eae6cf8c08b94c874cfb845246630609d7
-
SHA512
78ff2f4d9019bfdd2ceadefa4b86e31d119fe66ea2a00ab177bda70433b87aa431c02a517c023aaa6ad51349319140e344c5f0455d1aae1ccf13d279f9a3c427
-
SSDEEP
3072:5/4ErnBgo08oDUjum0F6KlAvJFUUSOIDAyhXbV/QO2LwAJouhs:R4ErBgBSyFFVlAv8DRQwAJoys
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5a3bcea85835ed465d2908d818b070_JaffaCakes118
Files
-
dd5a3bcea85835ed465d2908d818b070_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE