Behavioral task
behavioral1
Sample
826d970915b551dd57f75778ff2741cf_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
826d970915b551dd57f75778ff2741cf_JaffaCakes118
-
Size
216KB
-
MD5
826d970915b551dd57f75778ff2741cf
-
SHA1
3f090d7028a0d16485fdcb6d05a6f628b1ed2390
-
SHA256
10a5d4864d4bc57c5902c277bf54e05ef5913f776d0f107f89929f06a9268e99
-
SHA512
83792b1f25e1394e13ae4b2c6fe4d911f8ba2ac2f8a84f9a1dc8da6a47717ab39ba2582777195e20908fdb1738783c1beb4282028f6415b2e318751ac7956a12
-
SSDEEP
6144:7NCzLYXnXmUhko3w4ge971kk3YEJ9aghoSReo:7NCzLctvw4geda87JYghoSReo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 826d970915b551dd57f75778ff2741cf_JaffaCakes118
Files
-
826d970915b551dd57f75778ff2741cf_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE