Behavioral task
behavioral1
Sample
48bf2a0d0677f55bfb9cccf7032098f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48bf2a0d0677f55bfb9cccf7032098f1_JaffaCakes118
-
Size
2.6MB
-
MD5
48bf2a0d0677f55bfb9cccf7032098f1
-
SHA1
8c7939b7922cf15ffe405a1de40ed708b81f6fde
-
SHA256
3db9aa8850a83e7d0cdcf0f748f29b587e792f3ecdf538b3c4792c7c0ea7b323
-
SHA512
63280ecd2bcd358705a18bdd01e990845e1558c44ca4bda6ae5463a158725ea10c2456f11cc505a64220519f3f8884f3938e16e15be0f955bc934e8d64c7403a
-
SSDEEP
49152:N1/TdRzh+lg/7m9MbTdyvd30L0yJMWSPv8:7fzhmXiTdDIyOW+v8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48bf2a0d0677f55bfb9cccf7032098f1_JaffaCakes118
Files
-
48bf2a0d0677f55bfb9cccf7032098f1_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 939KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ