Behavioral task
behavioral1
Sample
831a9855a382c3e40f4e840ca538d5a5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
831a9855a382c3e40f4e840ca538d5a5_JaffaCakes118
-
Size
435KB
-
MD5
831a9855a382c3e40f4e840ca538d5a5
-
SHA1
90b7318553ce8ede9fec86c30a797fe5ff6e3f37
-
SHA256
de9ac6780e71a2991dd2feab7a99fa3e25ad1c29ed2cf411204ff1ef66d9b864
-
SHA512
0523c0159c0d1f65134ee58098a7e0cbd55df5d4d85ed07b70755e59b49ba1f0294e5d0c03fc412274ec90e4ae4d4bf84b516f0f9a0bfbc19f6272f87df4c612
-
SSDEEP
6144:15zCDsPq5rnNr0/jCwkKdK7CrjtLGuDAsSJITlWXA2oBFoSgZ44MM2UExGB6iLs9:zalbNgewpuCI7JikXA2oDoSO/8G0EmDT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 831a9855a382c3e40f4e840ca538d5a5_JaffaCakes118
Files
-
831a9855a382c3e40f4e840ca538d5a5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE