Behavioral task
behavioral1
Sample
755bea1eecdd4d3ad37703d10d67cd22_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
755bea1eecdd4d3ad37703d10d67cd22_JaffaCakes118
-
Size
472KB
-
MD5
755bea1eecdd4d3ad37703d10d67cd22
-
SHA1
fdf133badc4db4e606d806eb31fb6ef2c9ad28ed
-
SHA256
157addbe2908ad86e8b5bbed6e52e9fcb626f9bd47af34df04efe8c77492ad90
-
SHA512
9a940c4b937d1f4fd3ef88486e075fce7060f996dcf1e75d66ee3cf3f3a6bd19f6afd3f45c96fa08a8e3e87d19cc47d2311ee5281b62fc79d70f9e8240a9b61e
-
SSDEEP
6144:+lPy2bbpM+16q6HQoGBXVNYbQHMF3oU68P6WcOLw0mkP/4WiB+1Ee:XmS+1yHYRVNYPE8P6bOL/A101E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 755bea1eecdd4d3ad37703d10d67cd22_JaffaCakes118
Files
-
755bea1eecdd4d3ad37703d10d67cd22_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE