Behavioral task
behavioral1
Sample
df893294ba9fa01a0054b45fb885bf2f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df893294ba9fa01a0054b45fb885bf2f_JaffaCakes118
-
Size
52KB
-
MD5
df893294ba9fa01a0054b45fb885bf2f
-
SHA1
28b035abf8348419fa41cc96fe6d73622fcfd328
-
SHA256
b214583d2e31d789115b6b31549cfe165f0c578dfcd8829390a80e6a7b48e919
-
SHA512
ad6c6cd3b996e0c3484de531d00804c9aa662fdbfbd3428d31e3c0f068b2970b7261af851126e39a4d1428ab198a08739a4c8ecca9bf2c836f4e40b6ac0a05ac
-
SSDEEP
768:0uvFby6pRYcuhdDwiaX+L0NrYUz0ZZNs/1fyAVdLDeBBMYzmC+KXZd4eKlhe:0uvJtiiW02bZY/xDmVmC/dK6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df893294ba9fa01a0054b45fb885bf2f_JaffaCakes118
Files
-
df893294ba9fa01a0054b45fb885bf2f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE