Behavioral task
behavioral1
Sample
e97917f0f4999a844f163e3147a26b38_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
e97917f0f4999a844f163e3147a26b38_JaffaCakes118
-
Size
7.5MB
-
MD5
e97917f0f4999a844f163e3147a26b38
-
SHA1
5d6f88a0b1ffca7b66b3ae6af5a29df7ecc1a088
-
SHA256
e3d3964ff6e6c630d2e891c82e226998439cbb6ce7ab757c10f58902275d8903
-
SHA512
99a7b5607238ec65fa5da1d1b62167b880d7bb5ee6417ddbe4e19180ffc5b77582f8f5eaf18d6ef2bdeb2dc4213cb7471b1135bbba79a1e134386555bb4f0c4d
-
SSDEEP
98304:dE35E3LE3nRE35E3LE3nGE35E3LE3nDE35E3LE3n6E35E3LE3nyE35E3LE3nbE3n:D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e97917f0f4999a844f163e3147a26b38_JaffaCakes118
Files
-
e97917f0f4999a844f163e3147a26b38_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bldvar Size: 38KB - Virtual size: 196KB
BSS Size: 12KB - Virtual size: 192KB