Behavioral task
behavioral1
Sample
63edaff6456416705f0330dee7e59058_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
63edaff6456416705f0330dee7e59058_JaffaCakes118
-
Size
386KB
-
MD5
63edaff6456416705f0330dee7e59058
-
SHA1
4a5ac380e937902b3de69c10ec1d775cc0ba8220
-
SHA256
8f4d988cb1849df68eea3653e2035596f6667b6be1a86f704894190d98c480e5
-
SHA512
b26a008bdc363594b87fc5312b0ec05ac4dce98cb018159ba76c9a25eff7019d14c9037240474e420b45b7e6b93a998ad7f39080e5d465bfbe59755065a751c3
-
SSDEEP
12288:j9xZ5yN3Cwaw//ikDju436I26h+OoS9Oti:j9vsky/7NKDm+1i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63edaff6456416705f0330dee7e59058_JaffaCakes118
Files
-
63edaff6456416705f0330dee7e59058_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE