Behavioral task
behavioral1
Sample
f258e330f1d16a5314e7fe579c6cdc1d_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
f258e330f1d16a5314e7fe579c6cdc1d_JaffaCakes118
-
Size
216KB
-
MD5
f258e330f1d16a5314e7fe579c6cdc1d
-
SHA1
85496e2586e982d5fead90b4bed479b71b89c2b7
-
SHA256
ad2d7fc0983a2906285019bacec3224b86fb8b1997e800c257efe3bd4aa8df51
-
SHA512
a2cb9d8036247fbf201b9bc104ecade4e98d94a25e6deeaf1d5b7162ea0185769b8ca557009ed32d1b7fd0ab4a337c07709e3f6ec020c2338680a24d441b3f89
-
SSDEEP
6144:7NCzLYXnXmUhko3w4ge971kk3YEJ9aghoSReD:7NCzLctvw4geda87JYghoSReD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f258e330f1d16a5314e7fe579c6cdc1d_JaffaCakes118
Files
-
f258e330f1d16a5314e7fe579c6cdc1d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE