Behavioral task
behavioral1
Sample
c18d72c5bd18ee2adef2db54545638cb_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
c18d72c5bd18ee2adef2db54545638cb_JaffaCakes118
-
Size
462KB
-
MD5
c18d72c5bd18ee2adef2db54545638cb
-
SHA1
da29931fbd9f4cb33f7da85391bbd7ed75bdda06
-
SHA256
fcf7c7008abc9bde9cc0983819d4d9d84181138257b699ca8a0fbcb92c5d9091
-
SHA512
47cf8e95552d3b905be88e129b09f2258f2740855ff822837f50f226f179e011cda29e4e6e44e67d981153bf66359b1f9f675b8af3657b587e8e3c9cf72d79be
-
SSDEEP
6144:E9H4y9VOpL/DrRRoSGFPRuDYBzFrY5dRA2AkCMnZi6c/2AS9kFwJAReRO:EZF9VOpn7oSG1EcBhs9xAkLZMos
Malware Config
Signatures
Files
-
c18d72c5bd18ee2adef2db54545638cb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 145KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 251KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE