Behavioral task
behavioral1
Sample
dd8a772d4e8f7f08c3a7f1f07a080472_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd8a772d4e8f7f08c3a7f1f07a080472_JaffaCakes118
-
Size
45KB
-
MD5
dd8a772d4e8f7f08c3a7f1f07a080472
-
SHA1
6a8daeff7cdcff609884d46f81401ed49842d4d8
-
SHA256
7702f750a41588e9766ace62f46591e525120ce8317440a7f7d0446ba2ce79bf
-
SHA512
dbd2c9937bcae057816575e8359a9cd4d1d0fbb213586062f20031fb08b2646d5836e0429c65c2035ce8194d793ce410d2c853d13a10c92be7c08a151ba538bf
-
SSDEEP
768:/ejfsRcovazo7Szu3Txp0b7YivRNnV+6PJcdX+V9rX7U:/nRc4aE7ljLm7Jm6PmX+V9s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd8a772d4e8f7f08c3a7f1f07a080472_JaffaCakes118
Files
-
dd8a772d4e8f7f08c3a7f1f07a080472_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE