Behavioral task
behavioral1
Sample
874a3a56bc2b0b154f94942f60cc9dfb_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
874a3a56bc2b0b154f94942f60cc9dfb_JaffaCakes118
-
Size
79KB
-
MD5
874a3a56bc2b0b154f94942f60cc9dfb
-
SHA1
4ddb5aedbf03bc46ac8bd34e7f11df7d3e70aa6a
-
SHA256
aff44406e80df054b7c530b26ea7d83c5ac4c6ba9219065ef79b6ed497091bd8
-
SHA512
f847022ac40a6ac9c82d280883e425f2b03e3fee737e882e3e628c7473c97ad518d89e600e12abbf347224cd746c7494b3b841997b2bfd7ed0559e5edb0dcb7c
-
SSDEEP
96:q4DJ4UIBsYN8KTpl2L3E3hA1BWntV6E7qc38fphEEzBL07TJJJJJJJJJJJJwvTGP:q41tima4LURAWn36s8p6wEUrGiuWW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 874a3a56bc2b0b154f94942f60cc9dfb_JaffaCakes118
Files
-
874a3a56bc2b0b154f94942f60cc9dfb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE