Behavioral task
behavioral1
Sample
1a95f3b65c05e0b7a86180f6a25ce447_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1a95f3b65c05e0b7a86180f6a25ce447_JaffaCakes118
-
Size
388KB
-
MD5
1a95f3b65c05e0b7a86180f6a25ce447
-
SHA1
8d7fb5e532b54bb8d9e6608c30f4b6e4e3e4d003
-
SHA256
e5fe24df65de50d9d0dc456da5e8ca091ae53f1a067a443a518d4095c0079d5b
-
SHA512
947d3bbb66833a8146e486e1a73c6d1e9f7339d7e6370c7ccc75c45458f6752dfe6f44b6477599a9e9e9740de1880f7a7c9c00c49dcebf5979df12bfffe922fb
-
SSDEEP
12288:i0Zfg9itb2jb+ekB9pKHa5KYR/uvRagEwoSTesr:i0ZgAgnPT65KYR8RagTr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a95f3b65c05e0b7a86180f6a25ce447_JaffaCakes118
Files
-
1a95f3b65c05e0b7a86180f6a25ce447_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE