Behavioral task
behavioral1
Sample
ddbd72a096c0a95326b7e44bbe562f76_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ddbd72a096c0a95326b7e44bbe562f76_JaffaCakes118
-
Size
784KB
-
MD5
ddbd72a096c0a95326b7e44bbe562f76
-
SHA1
d3b5777b42ca12d3f3e46b5f3f2fe1c244f4d789
-
SHA256
c9fbfccfec939d517171743aa35251ee167e78ec7bd501b8ad90f109722d69f9
-
SHA512
a22fb3af0cd7ce1e15e1529edad1f579f31f0edb96796400fbbed57fefd29202e36cc1de8c27d8c29c8abac1b626373cfe494f036ee502c4c9f3e3d518571aeb
-
SSDEEP
12288:Wdy55mmJUkmR0YaucLVOEIpF10mWQwAMosWACcwhBLATU3TVR1P7v681Z/ZyibTq:755mmCh565OhpFaQWozPxAIx/uoXTq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddbd72a096c0a95326b7e44bbe562f76_JaffaCakes118
Files
-
ddbd72a096c0a95326b7e44bbe562f76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE