Behavioral task
behavioral1
Sample
df9d07f05a4e5e2052ca72aa01899f44_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
df9d07f05a4e5e2052ca72aa01899f44_JaffaCakes118
-
Size
784KB
-
MD5
df9d07f05a4e5e2052ca72aa01899f44
-
SHA1
b889758644143dcdb5f5ccda14ac16ae410d9caf
-
SHA256
357ec3f7391c61987774bfa6bf33cdc11e1f832252e7dc074fffe28c6ecf6ed6
-
SHA512
e22d1217e7ab01e9bf0d6ec81ec76851e351498035b36f4e41124cbfb14223990fa34647047aa453db4598b849002a6092865c41d011675c0a6bc05433c19d50
-
SSDEEP
24576:TxYWyPtQRZj4daCt41Pt5iDlPmQ+NOZ2as1Qoyp5ks4GZ:CtuMd8Pt5iZ6NX8rp6s4G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9d07f05a4e5e2052ca72aa01899f44_JaffaCakes118
Files
-
df9d07f05a4e5e2052ca72aa01899f44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE