Behavioral task
behavioral1
Sample
88230a0a32430352176f6a6925782bd6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
88230a0a32430352176f6a6925782bd6_JaffaCakes118
-
Size
257KB
-
MD5
88230a0a32430352176f6a6925782bd6
-
SHA1
fb0cd5c3329e2a2bab9c0719a42867ff23afdbb8
-
SHA256
e82b7c77f2cbbab35e782834ce560dd5d8e5426d68fe38e23bf596d588e7d16d
-
SHA512
cf6f635276f3175b3209df4f2d4ec1adc4d8be3bc20988cf937c2a8660c01b701c9ed113ba49cd0580c9ad26b01d0032f20bc3bfbb953425cee76d0f534f7838
-
SSDEEP
3072:VnP4sTume4WgKKirSpWuU0zq4Rg4pGWrLqEh739EbW639Cx:J4sTuUr1ZRLhLOWO9Cx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88230a0a32430352176f6a6925782bd6_JaffaCakes118
Files
-
88230a0a32430352176f6a6925782bd6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE