Behavioral task
behavioral1
Sample
df9e69c023b0725b8556551ed2882041_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df9e69c023b0725b8556551ed2882041_JaffaCakes118
-
Size
857KB
-
MD5
df9e69c023b0725b8556551ed2882041
-
SHA1
ab5dc74e12e8992a6bbc0b023f9f61db49d6feed
-
SHA256
88103ed7b780dd86011bb7830193a2cde712b4b0472dac06979d15a83c5be324
-
SHA512
f311ff8a2bb755545c46d81bf4ca1f07a64700e4fd580d34b6bf431abf282149f91c4c38745cb20ee3a9cb32c7c1ed014d6b184788a1eb56ef54de97ad30e97b
-
SSDEEP
24576:ndfaYRaA8KRlFDSHAIwKRHi+pqq+M7kSojV39d:haKaAXrDuw8iMz+M70
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9e69c023b0725b8556551ed2882041_JaffaCakes118
Files
-
df9e69c023b0725b8556551ed2882041_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 853KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE