Behavioral task
behavioral1
Sample
166f4ac3d58bed21b867b9ae8501adc7_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
166f4ac3d58bed21b867b9ae8501adc7_JaffaCakes118
-
Size
386KB
-
MD5
166f4ac3d58bed21b867b9ae8501adc7
-
SHA1
2ca433a3fb32ce47a40466dbffe4a51001f134ed
-
SHA256
33a309fa09f9f0f34e19e5cc39829568eb4a9577c84cceda02d0d090651de94b
-
SHA512
63d805fd55991697cd88d05144b8efeb8fd88a1c56aac7d6350486ce7c4892eb218cb14a971c79b6214e68e54a0373944995d3604d87d66655032b8caf333f28
-
SSDEEP
12288:79xZ5yN3Cwaw//ikDju436I26h+OoS9OtE:79vsky/7NKDm+1E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166f4ac3d58bed21b867b9ae8501adc7_JaffaCakes118
Files
-
166f4ac3d58bed21b867b9ae8501adc7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE