Behavioral task
behavioral1
Sample
93e087497d8f1985c95add569b98953f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
93e087497d8f1985c95add569b98953f_JaffaCakes118
-
Size
2.6MB
-
MD5
93e087497d8f1985c95add569b98953f
-
SHA1
cc4b06b354481ff47e9305338c2b938a882f8fd9
-
SHA256
332934cbb93c190fc6e800ae614ab6e9fdd39b263469faa96a6853a6ea25c902
-
SHA512
93e8910d2e943e35b546c0a6b366b381d5ad718a9a832dd68f7435dbfde5cb457d6e2a6edb145e36e674aadf129f3941ea26c5f2815c90abd28aea789f66d525
-
SSDEEP
49152:pTSm2JDzETSl+5VtSA4bezbspp1OhcPNlEmSAZl1k:sm2hz+++/tSARzClEiBk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93e087497d8f1985c95add569b98953f_JaffaCakes118
Files
-
93e087497d8f1985c95add569b98953f_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 998KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ