Behavioral task
behavioral1
Sample
2626cf8303dee77aa070b1e408709d57_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2626cf8303dee77aa070b1e408709d57_JaffaCakes118
-
Size
386KB
-
MD5
2626cf8303dee77aa070b1e408709d57
-
SHA1
449db08e6679457264a598ac6210956909895515
-
SHA256
a08ed5e0a2e3232c10130745735b39e534c7fc95fbf2d7479986e3f16cf19b21
-
SHA512
73e07f96fdb164a0c20ed69aff25f68a0a8488e791388ad39d73a26c9f7bbe0c0e3e7c3eb607b961a8f67566cd27ebec0e2013b2e198a4007db8d24984e70edb
-
SSDEEP
12288:z9xZ5yN3Cwaw//ikDju436I26h+OoS9Ot9:z9vsky/7NKDm+19
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2626cf8303dee77aa070b1e408709d57_JaffaCakes118
Files
-
2626cf8303dee77aa070b1e408709d57_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE