Behavioral task
behavioral1
Sample
df5a7dbc14476de1be34c96f59dc56ca_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df5a7dbc14476de1be34c96f59dc56ca_JaffaCakes118
-
Size
238KB
-
MD5
df5a7dbc14476de1be34c96f59dc56ca
-
SHA1
4b172d184b94988c184052c2174c312292d13db3
-
SHA256
6f22a9c1b0a1fa0c64ccc36431b910710559ce1e1fa019df56ffb7c9f6a02f87
-
SHA512
b15806cc4966a8407ee64eef75cba07bead05d1f14c89fe0e6423f4c6e54cbf3601ba80ede23a3dc7ec566d704066680ea9f1812fe5e7befa9ccbc539ccd6989
-
SSDEEP
6144:61p6w9jSGkv30pq+BIbEtVUz9qhmeCmzHGPlcDoS:y7jSBvwq+BIQSUPCmzHGMoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5a7dbc14476de1be34c96f59dc56ca_JaffaCakes118
Files
-
df5a7dbc14476de1be34c96f59dc56ca_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 234KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE