Behavioral task
behavioral1
Sample
dd9b28718f47094758969ffd130429db_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd9b28718f47094758969ffd130429db_JaffaCakes118
-
Size
123KB
-
MD5
dd9b28718f47094758969ffd130429db
-
SHA1
ed20630b0720b666b5da9570a8c7cd49d1e177ae
-
SHA256
5dd04c118e6432541529642ab46620be071f021f14124c63eb2ff768d95a76d3
-
SHA512
242fa17e9254591ab58f7df3d8f085f0388c64a05a01d84a8e779655b31759ca3a29d1a158248766b476f3b496dcc7ff053a70a722bc87524d79d01ef7d41ae1
-
SSDEEP
3072:wg70N9LnsHo5noVTe9BniGuZau2sokypuTrOOcout9:wgYsI5nGcBiGiNTCoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd9b28718f47094758969ffd130429db_JaffaCakes118
Files
-
dd9b28718f47094758969ffd130429db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE