Behavioral task
behavioral1
Sample
8a5db11d58564965c99e2c0d1c4f0838_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8a5db11d58564965c99e2c0d1c4f0838_JaffaCakes118
-
Size
388KB
-
MD5
8a5db11d58564965c99e2c0d1c4f0838
-
SHA1
cceb5dd76318d9e1162a8fcf01d642f6b222bc36
-
SHA256
0e8f8a78c230e8881edac4cda3602308a580aa69156149f4b480c377a3fb9ddf
-
SHA512
7901671b46a7a2af3280f16b498c6b1dc055c525dda9660cfd422a6996f98db763ff559f3884159a232ad02347e5be36d692c7d19683c3f4af40727461e1b3f0
-
SSDEEP
12288:q0Zfg9itb2jb+ekB9pKHa5KYR/uvRagEwoSTesY:q0ZgAgnPT65KYR8RagTY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a5db11d58564965c99e2c0d1c4f0838_JaffaCakes118
Files
-
8a5db11d58564965c99e2c0d1c4f0838_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE