Behavioral task
behavioral1
Sample
67fc4b80ddbd37ecd6976268148297bc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
67fc4b80ddbd37ecd6976268148297bc_JaffaCakes118
-
Size
1.1MB
-
MD5
67fc4b80ddbd37ecd6976268148297bc
-
SHA1
0bc55007b80de89df299faa754b827bc802f07a7
-
SHA256
18ad9f6e847a3cb9794de6b5e0f31845380d3d4f3efdf1ec7b0e8afc45098588
-
SHA512
22e3f3e87f72eef167bf80d1b9e96cf55bfc0258b6657185a3d47602dc5621242c589d5d7624a73ecb31a6016ae7a577bea549337fd7e6dff83d3e4b1619eb49
-
SSDEEP
24576:D9A0itwD0WAaAGp0fdHeW6dQdXHMKjI+mSm7QSD9GleRtfXK5UIy2m9/:xDitIAaTp0fojdQXsKjdlmPGlebi5UIY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67fc4b80ddbd37ecd6976268148297bc_JaffaCakes118
Files
-
67fc4b80ddbd37ecd6976268148297bc_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE