Behavioral task
behavioral1
Sample
74004eac8c192583f7cba0655d4ff39b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
74004eac8c192583f7cba0655d4ff39b_JaffaCakes118
-
Size
539KB
-
MD5
74004eac8c192583f7cba0655d4ff39b
-
SHA1
5ce89f6d456af0ee9b204a525a181a338b2786dd
-
SHA256
5724dc6147915ba31e2d58df53c6b5ce669a482aae4b3fdba09852f989b562a1
-
SHA512
c0ea8a91254975c1f54d887b2c72d670dacab13e4fd85ca0fc3a26d7d04824230590a4bb30afce02ff3ca847e66938a177d27f4bb2838997b16ac4462f3abb09
-
SSDEEP
12288:PPZGJ0HTRhUHpq1FoFdoVYzD8hSl1urr3kiVnCGtah0o:5GJ0HTRha41FeugCSl1un58j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74004eac8c192583f7cba0655d4ff39b_JaffaCakes118
Files
-
74004eac8c192583f7cba0655d4ff39b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 494KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE