Behavioral task
behavioral1
Sample
435cd074f0a22cfeb97af9d400c2165d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
435cd074f0a22cfeb97af9d400c2165d_JaffaCakes118
-
Size
191KB
-
MD5
435cd074f0a22cfeb97af9d400c2165d
-
SHA1
3ad5a0d1fc439991be8a41d0a2674632b08f46e2
-
SHA256
19e057e3534b3e09dc92c7ae0b1ff9a79307f91ef48e163541263700a7cc4f4a
-
SHA512
de9440d96908b34ab051efa05bdcfb8b9918462d76f090810104ac10067d3dfc6326a4dd9e4595dd37ce85003653886a95a6bbd7c63b495990200d32809babc7
-
SSDEEP
3072:VwZwGBfVS/X2y0j2WR2x5ZBKufxtXLCVr+D6QphC1/tjVUR2QcbM5bhNknEout:OZBfg//0OBHX0rDJjVUY/M5fkEoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435cd074f0a22cfeb97af9d400c2165d_JaffaCakes118
Files
-
435cd074f0a22cfeb97af9d400c2165d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE