Behavioral task
behavioral1
Sample
87641e58471e4739a0bd8ed20f33d6b5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
87641e58471e4739a0bd8ed20f33d6b5_JaffaCakes118
-
Size
199KB
-
MD5
87641e58471e4739a0bd8ed20f33d6b5
-
SHA1
2cbecb2e3be75f2f4ecb2f2a6dbc24f49d8b4daf
-
SHA256
38912f0b5b764d0e2feb677af50b5a548ab730127d221b4a356d715b53bed694
-
SHA512
9ddb866082b05bcc3ea629f7e62fc03e5eb5c1ab65be00a34efebd50ce90f5c389871247a49ef1bad1824ed587b14aa7e32a7606969c3fade688ed51de411f88
-
SSDEEP
3072:vI+aLkKaVVrRjgwh2XJIyh0SwOEhGsxF2bBsTybZ0RucmuxuM1:QJLkJDrewLfOFEFsBsTyV0XmmuM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87641e58471e4739a0bd8ed20f33d6b5_JaffaCakes118
Files
-
87641e58471e4739a0bd8ed20f33d6b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE