Behavioral task
behavioral1
Sample
dedef447bbd3096131b66675bdfaf148_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dedef447bbd3096131b66675bdfaf148_JaffaCakes118
-
Size
165KB
-
MD5
dedef447bbd3096131b66675bdfaf148
-
SHA1
9c9881e37495f81876258ba373b25074f9f09366
-
SHA256
98393716ff0243d72d943c625f2fe13bb69c2368108932e851374bd5b7e6efd3
-
SHA512
eeea8132310628fea7655ca0b6963e297d9ed9af76bca4a8884d4fe6e96fc6048a06db6efb39b2900c44906a762f76a7c60576c4b4386d303f72050e14e19e14
-
SSDEEP
3072:pfqKqf6l6PuEJomNen/PTbCbRscJwNl8n0W7EdE1qrZCnpn+o:NUf6l6nJBeHsRskUl8n0W7E61IZ/o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dedef447bbd3096131b66675bdfaf148_JaffaCakes118
Files
-
dedef447bbd3096131b66675bdfaf148_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE