Behavioral task
behavioral1
Sample
de5f6413cddb272fd5c8e737a9902bac_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de5f6413cddb272fd5c8e737a9902bac_JaffaCakes118
-
Size
6KB
-
MD5
de5f6413cddb272fd5c8e737a9902bac
-
SHA1
2d2741b4f494672c6f472e1feb16b8df95602b40
-
SHA256
503a0ba1ba508e6d3618321fb0a6d0cc0d3bd0b5704ea58faeef1cc645e8ecc7
-
SHA512
668eec2337bcd4c303f63b085a91bf95513de00e264d7fdef46d9086b8ab4789cfed551f84272ba6d8342c9ab49290e501c5c73aebfcdf1f60bc7497cac3e280
-
SSDEEP
96:bYsPgLjUH/Y9Wlx9Kpu3UGIQCoDhiqJjVBT6J3xJ285rV0htqqw8zKcRsVGjG/Lo:UcVg9AKzwhDVBT6J3/Vrajw8NOMjG0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de5f6413cddb272fd5c8e737a9902bac_JaffaCakes118
Files
-
de5f6413cddb272fd5c8e737a9902bac_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE