Behavioral task
behavioral1
Sample
7784a478648d0f96ecd49a0de24d9a74_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7784a478648d0f96ecd49a0de24d9a74_JaffaCakes118
-
Size
388KB
-
MD5
7784a478648d0f96ecd49a0de24d9a74
-
SHA1
7a23a9e93f6bbf5b7ae307799a8cb310babd9067
-
SHA256
b0464603f917d0efa57154d8a6d1dc25746b40e4e32c9a3dc36d2bd1506da1b5
-
SHA512
7625a638fbacb850d007fc8b6683bc03d878db760cbeb4dd00e8e712d98f1e24d7582eb92fb7fd7178e84db3c2222e88cddada23a9ef4e86fa2668f50c1f58b8
-
SSDEEP
6144:U805yHbwOUo6RwLfurlHiIsmyh5yCuCak3vSGo4cFpdc/eekNpoSHzees:p05OyrfRHiXhquv7Ypdc/eeqpoSTees
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7784a478648d0f96ecd49a0de24d9a74_JaffaCakes118
Files
-
7784a478648d0f96ecd49a0de24d9a74_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE