Behavioral task
behavioral1
Sample
7704d7c465eba51ef917089eab3a31a7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7704d7c465eba51ef917089eab3a31a7_JaffaCakes118
-
Size
386KB
-
MD5
7704d7c465eba51ef917089eab3a31a7
-
SHA1
a9ba95eddb8b49bea7b9c440fd93c87c6fd0d0a3
-
SHA256
8ac433ee14f7efe9f15f234bc09623dba8a78e5fbc8059b580fa6c5d2ca9d3a7
-
SHA512
edcf6c3197a112272514258a00e518243a41caef5d020b3bbfb1c13e06b261f427e15032ea2fe1e77c3b8edc64f1c5d5430176d617383a613b2a31d89b434cc2
-
SSDEEP
12288:z9xZ5yN3Cwaw//ikDju436I26h+OoS9OtE:z9vsky/7NKDm+1E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7704d7c465eba51ef917089eab3a31a7_JaffaCakes118
Files
-
7704d7c465eba51ef917089eab3a31a7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE