Behavioral task
behavioral1
Sample
0b4b48e6ce462c11ef3f9825c963f36e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0b4b48e6ce462c11ef3f9825c963f36e_JaffaCakes118
-
Size
386KB
-
MD5
0b4b48e6ce462c11ef3f9825c963f36e
-
SHA1
c5d3815573a4228ea1443052e524cb59bef1e395
-
SHA256
5cf75f6bc229071b2b2d5e72c2cc188e801d4359ee138d0a62d779fc0093ab98
-
SHA512
399800a4e935eda942eef83edb61b78ed0423ec5b7e3ea53937c2118c7dea24e14b0177e9eb640424a4809d3d8690e89bc6035b9206b410cc6fb878c8889dd04
-
SSDEEP
12288:W9xZ5yN3Cwaw//ikDju436I26h+OoS9OtX:W9vsky/7NKDm+1X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4b48e6ce462c11ef3f9825c963f36e_JaffaCakes118
Files
-
0b4b48e6ce462c11ef3f9825c963f36e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE