Behavioral task
behavioral1
Sample
dd7c4e10ffb892add4a72c6aefce6032_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd7c4e10ffb892add4a72c6aefce6032_JaffaCakes118
-
Size
1.7MB
-
MD5
dd7c4e10ffb892add4a72c6aefce6032
-
SHA1
b13201e977012e85334d95d792e1b035eef7ab26
-
SHA256
38fb502c780c96b18f42182cbda54a6170b84b1e2aa0e61e06e0607bf27ffe61
-
SHA512
95bebea66359cefb942031bbf6f0cd2533179af3c7b5a7f54ff6d19acf99fc2b34da541f0b1167f38779a5d155cceacd435a4ac674e6d1ccf4b63015c3248eb1
-
SSDEEP
24576:Ymj/kZPYmE0tMmgOIqR5CWVG0/E63Jq7bTgJAKn9eMqngsqql7bPCk7e:Y4/kJYpnObR/ebWA69eMqhqql7+kC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd7c4e10ffb892add4a72c6aefce6032_JaffaCakes118
Files
-
dd7c4e10ffb892add4a72c6aefce6032_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE