Behavioral task
behavioral1
Sample
07b576328262f34663c5eb7f58c0a350_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
07b576328262f34663c5eb7f58c0a350_JaffaCakes118
-
Size
386KB
-
MD5
07b576328262f34663c5eb7f58c0a350
-
SHA1
2c8d9dd3dd8a9820972cbab57d40685955953fbb
-
SHA256
0fdc388299de5552ae95a33d5c38a72306389357e26c9bbd362f2e547cfbb902
-
SHA512
777ee11b7251db2b53ba9b425d802ec9e0a9660112c361a8d78d24ea33d10ea18481bec1695da23c565e59c09bca39a7c992487bfcda728bd6b6553f6e97fb00
-
SSDEEP
12288:T9xZ5yN3Cwaw//ikDju436I26h+OoS9OtA:T9vsky/7NKDm+1A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b576328262f34663c5eb7f58c0a350_JaffaCakes118
Files
-
07b576328262f34663c5eb7f58c0a350_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE