Behavioral task
behavioral1
Sample
60db81694fbebabef98b7fbe78a1c307_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
60db81694fbebabef98b7fbe78a1c307_JaffaCakes118
-
Size
379KB
-
MD5
60db81694fbebabef98b7fbe78a1c307
-
SHA1
8a131751c1b8e598cd0003e93ba434d7ddbe326b
-
SHA256
4077380f186bd24052927642480fcef3940b800616fc8c35dcf40422269bc6c0
-
SHA512
1b550d00949553b72ba1aff9f25f88ab68f0b0f8dec50258cb4c5952e7b1b4ca896da5d51929ac312f36c6e9fe1a6643732f4530726a00b63898a54ea3d4a20b
-
SSDEEP
6144:P+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LEn:Xs03z8tgkGJRxpw4osO2JoS0LEn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60db81694fbebabef98b7fbe78a1c307_JaffaCakes118
Files
-
60db81694fbebabef98b7fbe78a1c307_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE