Behavioral task
behavioral1
Sample
106626bf2c65cd5e8cae6ae7ae5075be_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
106626bf2c65cd5e8cae6ae7ae5075be_JaffaCakes118
-
Size
330KB
-
MD5
106626bf2c65cd5e8cae6ae7ae5075be
-
SHA1
8db9cf9862bb761fcc92929a3f1400deca0a7175
-
SHA256
baf1a49ba05172b9d718ed2bb680605b4de17a217513281e5ef44bab07fdde3a
-
SHA512
caed212c395f4961fc2035a7f53f5e73fc6a222f7e6382e03d3b0f7004f8c9ef55dfb506d9442ddb3b0f45deabffa2c02477c695ee7157839406e374065e3c38
-
SSDEEP
6144:oTOqyhnLIkfpxGdSTrXwjRkYImA6hhT++L8iorVxoBpNmh+zv0N:lqylVfpxGjbIahp++L8ioMBpNvz0N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 106626bf2c65cd5e8cae6ae7ae5075be_JaffaCakes118
Files
-
106626bf2c65cd5e8cae6ae7ae5075be_JaffaCakes118.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE