Behavioral task
behavioral1
Sample
86c0f7a826810448ccbfbba44e29e3ca_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
86c0f7a826810448ccbfbba44e29e3ca_JaffaCakes118
-
Size
320KB
-
MD5
86c0f7a826810448ccbfbba44e29e3ca
-
SHA1
91faa9c2a85ee570fbb9dbe0efd0eab91c88d8e4
-
SHA256
6af4ba8974cb9b84f268386d2e280875a93ed2e90067c95fe532e52fb049fbbf
-
SHA512
482363b02c8893530712cca9ead0a7ff2720fce01def8cc66d37c13ecc55ad0a66332b09fdbb6a0ddb8d40259237940d49fbfaeaaec4be4e3106c11216aae24b
-
SSDEEP
6144:GMmCONdI6znSQQWnV4uga2sEhezBL/WcRMnQNJ3Rki3Ny:Fx56j5bnVras6WNJ3rY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86c0f7a826810448ccbfbba44e29e3ca_JaffaCakes118
Files
-
86c0f7a826810448ccbfbba44e29e3ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE