Behavioral task
behavioral1
Sample
16ef2b409a65314c2b25531729841f14_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
16ef2b409a65314c2b25531729841f14_JaffaCakes118
-
Size
388KB
-
MD5
16ef2b409a65314c2b25531729841f14
-
SHA1
4fbea09d49b25abe39de5f323ae7f4257508cad4
-
SHA256
b8703627ad081fa48cb8b7b41367d78eb7931bc0abc670d750187862fb44c2db
-
SHA512
fb995ed0dcff54fd67fd0f297c013b0da3203ac34cbd934072a890dfc1acbfa22402017f85b41d4dfa7d23ebcd06078e6e8b6a5aac6ab01764ee0eeb33e013f8
-
SSDEEP
6144:y805yHbwOUo6RwLfurlHiIsmyh5yCuCak3vSGo4cFpdc/eekNpoSHzeek:f05OyrfRHiXhquv7Ypdc/eeqpoSTeek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ef2b409a65314c2b25531729841f14_JaffaCakes118
Files
-
16ef2b409a65314c2b25531729841f14_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE