Behavioral task
behavioral1
Sample
82e98dff3fee7d6cfc821d652c3289d0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
82e98dff3fee7d6cfc821d652c3289d0_JaffaCakes118
-
Size
139KB
-
MD5
82e98dff3fee7d6cfc821d652c3289d0
-
SHA1
77864178ab3c86a07821b49eb0177756ad08adb0
-
SHA256
ff1fac3ca229ec72e167ee5b0a4a6d855de032c1945aa287f84b86df25d36a9b
-
SHA512
923f15fa5392cd5387c1e35a9da833c2a0e3accb41a5fdeca9538ca7ade6fd32b77439d19cca3e19ec06df05cc9cd3456e6afe9bf56a87f18f90e2a829422b8f
-
SSDEEP
3072:d53nncABsdaAwsAbElxj3FF1fQdyZWYQjfg5ig/6t524sWQJHg2vout:73ncFda1hElRT+q48ig/U2NPHoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82e98dff3fee7d6cfc821d652c3289d0_JaffaCakes118
Files
-
82e98dff3fee7d6cfc821d652c3289d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE