Behavioral task
behavioral1
Sample
7855c8114b237aa7fa98bbc226c0cab2_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7855c8114b237aa7fa98bbc226c0cab2_JaffaCakes118
-
Size
386KB
-
MD5
7855c8114b237aa7fa98bbc226c0cab2
-
SHA1
6dd168ee3b4a01f258c80f7f633841505dd57d32
-
SHA256
d8f611212da997ab1fb4bc5e96fc9a5501ec3a3eadcfe955d5ab7de79d7eeae6
-
SHA512
8069652c90eaf16b07362d4ec3598ab9d8a7b15054d775f2741e130ec8d9acc8cafe02dadcbb6aa969ff1d76417594decdc563fcf41cd0d5bc4782e5e9218121
-
SSDEEP
12288:49xZ5yN3Cwaw//ikDju436I26h+OoS9Otl:49vsky/7NKDm+1l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7855c8114b237aa7fa98bbc226c0cab2_JaffaCakes118
Files
-
7855c8114b237aa7fa98bbc226c0cab2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE