Behavioral task
behavioral1
Sample
88efc585df32e8eab4e173d9065aabd0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
88efc585df32e8eab4e173d9065aabd0_JaffaCakes118
-
Size
1.6MB
-
MD5
88efc585df32e8eab4e173d9065aabd0
-
SHA1
d3d487e44da4733afb13fd493a8ab4d4f81d08d8
-
SHA256
8e3a1ea690ea2019b48aa2384faf3226b2720cda253d08f9ffac6c6ab41c9d83
-
SHA512
502adfac345a6a0681e4a7e9d72248054d8cad4a4fa861426a8bf105d152eca620dd5690cfb300d1f4016099c9b427a4aab44cfba4311a4b48284c7903c27d01
-
SSDEEP
24576:ZM/kdJY9tNSjKTqUjxW2NgTjYCCZDJm2FMgWsdy9QD9cPJSeHf9Ot9/9NXBryAUz:ZZJkt5Tqgxx6cCC3m2Fasdysi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88efc585df32e8eab4e173d9065aabd0_JaffaCakes118
Files
-
88efc585df32e8eab4e173d9065aabd0_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 994KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ