Behavioral task
behavioral1
Sample
24bc39403a951e9e57102be5e920859c_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
24bc39403a951e9e57102be5e920859c_JaffaCakes118
-
Size
234KB
-
MD5
24bc39403a951e9e57102be5e920859c
-
SHA1
391d97f41f20f58ae24c6a20263a3efbb1076f4d
-
SHA256
f8e5a44bae5c28d796f46cde477886c5cefb4057e4e33fa3d146fb5433a94115
-
SHA512
49eb5911ce5a3124b9905a6286e6bc132b1a483b0c327c9a9ea6c7aeef452ea13351334d58b4750d3efae798d64425e10136f1fcb9ad6846c2683cb09dd27724
-
SSDEEP
6144:N6/HfGdFjZvU1MSGTRa4T3nw9hr4A9KW4uaSoSWOX:KH8FjZsCZYg3crzkX6oSWOX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24bc39403a951e9e57102be5e920859c_JaffaCakes118
Files
-
24bc39403a951e9e57102be5e920859c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE