Behavioral task
behavioral1
Sample
debcb4024bf05b9a4e18d0c9cabc515b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
debcb4024bf05b9a4e18d0c9cabc515b_JaffaCakes118
-
Size
171KB
-
MD5
debcb4024bf05b9a4e18d0c9cabc515b
-
SHA1
9104331c3d70f595adb8247236917350d5ae091c
-
SHA256
105c8e9980fd6d2f0fe2249f75dc0fd0bdd5e3cc038a26082c51bf7483a554c4
-
SHA512
d34070b23f8046eb8e92c1a2d81c6e7f65a19fa4281f2b08d06e71a1644fb24571ad46fba71ee3590da4b686fef9a05641a5d9cfc37fdb075ded3b5fea471424
-
SSDEEP
3072:BMeSwnLcc9ZVdtBrhKDoPSuKqvaRcODTgjVa7JRrlfpsdm8aiCcE8gC64X+Ln:PSwLcmL8DoPtKqvaGODEBarl4LE8gT7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debcb4024bf05b9a4e18d0c9cabc515b_JaffaCakes118
Files
-
debcb4024bf05b9a4e18d0c9cabc515b_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE