Behavioral task
behavioral1
Sample
f929bdf6eb536adeeebecbace4dca8fe5facca026d21b51277da9a57c0acc880_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f929bdf6eb536adeeebecbace4dca8fe5facca026d21b51277da9a57c0acc880_JaffaCakes118
-
Size
2.0MB
-
MD5
67490f5da8b081808c9d4dd13f9070e2
-
SHA1
37fb6e9f977d607c6d76adb2f7cd0dba298e7fbd
-
SHA256
f929bdf6eb536adeeebecbace4dca8fe5facca026d21b51277da9a57c0acc880
-
SHA512
76e57aa918dcccfc37983c9229386e70fabf1ed74b0d00322110b6cd20647dfac630b2ffc6fc01a5b550b3c4c936f74ce4955112f059092f5e1033ca2f909660
-
SSDEEP
49152:YTOResAeg3PdZ2xFJ89NhHPWD2bv0df7jPNP+3do:YTORXAeg3PdZ2xgjNGmv0hjNGNo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f929bdf6eb536adeeebecbace4dca8fe5facca026d21b51277da9a57c0acc880_JaffaCakes118
Files
-
f929bdf6eb536adeeebecbace4dca8fe5facca026d21b51277da9a57c0acc880_JaffaCakes118.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE