Behavioral task
behavioral1
Sample
100e29f82113a2cc7f10c98e584fdddd_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
100e29f82113a2cc7f10c98e584fdddd_JaffaCakes118
-
Size
386KB
-
MD5
100e29f82113a2cc7f10c98e584fdddd
-
SHA1
d60b0fd7020d041bd9d76d3cf0d35b6205340496
-
SHA256
8a0b99b71bc09b00320d4bb6b354d318287282d77c32de517858b7236a0920f4
-
SHA512
05c580356e4385bbceadb7276b0cb827fddaf37dabbbd060ff509e1dcce5c19aa1e6e18a0603f4d2ea7b21e286606a9d4dbbcfc108ae7dfda21c40fca7b1c62b
-
SSDEEP
12288:C9xZ5yN3Cwaw//ikDju436I26h+OoS9Ott:C9vsky/7NKDm+1t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 100e29f82113a2cc7f10c98e584fdddd_JaffaCakes118
Files
-
100e29f82113a2cc7f10c98e584fdddd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE