Behavioral task
behavioral1
Sample
70f1de6e5af5d0ba618e5c74588ee5f9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
70f1de6e5af5d0ba618e5c74588ee5f9_JaffaCakes118
-
Size
348KB
-
MD5
70f1de6e5af5d0ba618e5c74588ee5f9
-
SHA1
6cb3ce195e665c8f1b8e9a6439a721cf51c3ed33
-
SHA256
980c3b3b7ab8b60e6f3274601b12284c2c4883737051c8ed401af6fc3934a103
-
SHA512
cacb3d8b7345d05abfac9c7d8d280db6a3d24243846ca6bcad2c6584eb6218b9a3349c608db130d5bf9639d442e4e7b1486b462fa9883f2a117da1ee290de6d8
-
SSDEEP
6144:VlZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76lLI24VLUU/F2x:VHLUMuiv9RgfSjAzRtyw9vFK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70f1de6e5af5d0ba618e5c74588ee5f9_JaffaCakes118
Files
-
70f1de6e5af5d0ba618e5c74588ee5f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 253KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE