Behavioral task
behavioral1
Sample
007d891a984ef21b355dab321e5f2e5a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
007d891a984ef21b355dab321e5f2e5a_JaffaCakes118
-
Size
917KB
-
MD5
007d891a984ef21b355dab321e5f2e5a
-
SHA1
eacbffa24d278ba07938647fb88e6daf5aa8917f
-
SHA256
b3242c5d003adcaf8d3d799e557a56a842ba4565c4ffd19737cbb3f820d3b2b1
-
SHA512
c639a5707873b276d53107c33e0aef2a096f63b2bdbd6909ce641bf58007d7320ea0a0fc50dbacadd4f8f8f1a21cc842b253452775e017e381c34ead44f094bd
-
SSDEEP
24576:dXyeCa8qwmXhFPGNP8g2q22GJ1DaB5BjAffsJxsziF8gp:dsa8mXhFPGNopDaBjyfsJxSiN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 007d891a984ef21b355dab321e5f2e5a_JaffaCakes118
Files
-
007d891a984ef21b355dab321e5f2e5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 883KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE