Behavioral task
behavioral1
Sample
833e11227343c9e4ff445441037f8468_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
833e11227343c9e4ff445441037f8468_JaffaCakes118
-
Size
436KB
-
MD5
833e11227343c9e4ff445441037f8468
-
SHA1
8663d8853502a06cb74390f2677edb487f6451e2
-
SHA256
3aba6554dc0dea1dadab76344609642a88fb2cd25244eb4af336c9d771446655
-
SHA512
c973d86921a398f62b89daa8adde956850ef146e7225f7fcec7a6ceee2309053ce55d2a3653235a7838a79f19a20fb923665bf6134cce36e9509969a66e84efd
-
SSDEEP
6144:NP0OK9qXDTgWKkH7u4PZIC9iFJ/HegwshpfnUo9uspmh4G1uCIkqejaoSp:OjgbKsPZUeDshNUoJtG1BIkqejaoSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 833e11227343c9e4ff445441037f8468_JaffaCakes118
Files
-
833e11227343c9e4ff445441037f8468_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE