Behavioral task
behavioral1
Sample
789f2a7a8ef689f7109f44961a5baf3f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
789f2a7a8ef689f7109f44961a5baf3f_JaffaCakes118
-
Size
386KB
-
MD5
789f2a7a8ef689f7109f44961a5baf3f
-
SHA1
833fd9bd306b7f213fa207c64d2e05c8e642eebe
-
SHA256
c04334131177f1d3c7453ea66ff66b8c4eae1a74885f4a46b58283f11014ebb5
-
SHA512
74cffdbb8f36a1acdec4cc58b9b5512b66b7846df492ec8959bda968d6e5f89e696b76a0bebb3c7128378fe910667f72955920e9249d438d5a47b6a632690836
-
SSDEEP
6144:xhJhWT3UEIA1CqzU75aDdrTPbNZAXdPRh2IQLtL2yy02V3IGcIFoSe8OIL:xzhGqAQqzU7GrTzNZeNAl2yy9BoSZOIL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 789f2a7a8ef689f7109f44961a5baf3f_JaffaCakes118
Files
-
789f2a7a8ef689f7109f44961a5baf3f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE