Behavioral task
behavioral1
Sample
8818a5d128b564b99b71eaf48d77c8a1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8818a5d128b564b99b71eaf48d77c8a1_JaffaCakes118
-
Size
470KB
-
MD5
8818a5d128b564b99b71eaf48d77c8a1
-
SHA1
7c6edf2a35ba07399417532bd662794531d32273
-
SHA256
32a339be3ad6638aa43c2c9e6cf9a2cf199d07ed0e1f4490559974d57524603b
-
SHA512
251c8f4190355cd7f5625c9e52bd665ed9e7f2b3a5b3bd7bc12ce49c9ee3854692107594d7833c12d5eb5d9a16cc7318df4505c166295bbb5b2ad2f88c95f773
-
SSDEEP
6144:s4pVJx3Zq0OY1G2Siwm7rHubEvQMZ60EeVVTVK4ZnoIBNoLqBN0uQVW:xvJqQ42qJlMZPEoTVKInzoGnj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8818a5d128b564b99b71eaf48d77c8a1_JaffaCakes118
Files
-
8818a5d128b564b99b71eaf48d77c8a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE