Behavioral task
behavioral1
Sample
d742eb9679994e7a5c46de901e919879_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
d742eb9679994e7a5c46de901e919879_JaffaCakes118
-
Size
660KB
-
MD5
d742eb9679994e7a5c46de901e919879
-
SHA1
c9246b496a962301034c7148618d8e7710a33ff6
-
SHA256
d44eacdd8e1bac09ca484ec1e9e63735b81a61f173cab3672593d8c0734794e7
-
SHA512
b7beb4d84e210d46475fdf7a9c654d950b2b8890fdbed456a508dbdf8b5da871c7c7707c3bdbbd4fc5e36cbe19adf55733da7dbe02f18a10ed78bd49e25dcd4b
-
SSDEEP
6144:O1xBWeMRygxDLbHxlSBxzJn1REBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGDqLb:Ol3MQIDKJzTq+Xxvo0U+d3s/fCX0t
Malware Config
Extracted
urelas
121.88.5.183
218.54.30.235
Signatures
Files
-
d742eb9679994e7a5c46de901e919879_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE