Behavioral task
behavioral1
Sample
7175bcbd19c45a3e2d6b0e12415318c0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7175bcbd19c45a3e2d6b0e12415318c0_JaffaCakes118
-
Size
352KB
-
MD5
7175bcbd19c45a3e2d6b0e12415318c0
-
SHA1
bee8aa6fce6b1a2cc5e730fcda1b63d1efbeff08
-
SHA256
59b822f58d0a71bb3cc687a7e91bb899f3f6b19eba9e410de3fbe4a8a4bcb163
-
SHA512
358886275333d60aaa5c05ce6e35f5aeabc787cd8f0a0e3380e3df69392d51d643e730b1947b86de34487627f5882d5744c0bbad5704dbecc3d0e77e0e4cca05
-
SSDEEP
6144:1vtQ5oouOukkd5PUX1kE0h70pSdGu/ZuMR04ffEsU1OKSqDHkFyDOQk76GWRUcJE:D+tRukOP4y1dGAZxffEsUJxHkFyrk2rO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7175bcbd19c45a3e2d6b0e12415318c0_JaffaCakes118
Files
-
7175bcbd19c45a3e2d6b0e12415318c0_JaffaCakes118.exe windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE