Behavioral task
behavioral1
Sample
282744efa789d5402d252306a0d964c0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
282744efa789d5402d252306a0d964c0_JaffaCakes118
-
Size
364KB
-
MD5
282744efa789d5402d252306a0d964c0
-
SHA1
372e63987b30fda4f7161eaba3d020bd2b1ca7eb
-
SHA256
34f61d65f80d3f8efb3601d86caaca52787c21c8aa8fa2211c70c80f0fe23c0d
-
SHA512
ef6b28e5169b11dd5925deee4c02445d693494dd46f155539b13ee255c61fb7d1c6e6eba98d0abad07eb5d1148302a39a0dc9f953cf8eb46f6f81e82a7dc0c82
-
SSDEEP
6144:gdnIz2AMyzRJd7cGyMvNDGkOWXnlzrhPHTJj5o7Aw2x7E2KkeTW3MFoSUc1q:gdnIoyzRXXRv1Wkl3hPH7o7A7EweTW88
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 282744efa789d5402d252306a0d964c0_JaffaCakes118
Files
-
282744efa789d5402d252306a0d964c0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE