Behavioral task
behavioral1
Sample
953d201a9d87a0205a651dc2e29ef52e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
953d201a9d87a0205a651dc2e29ef52e_JaffaCakes118
-
Size
2.6MB
-
MD5
953d201a9d87a0205a651dc2e29ef52e
-
SHA1
cc51e2d65eed9fb0a721f87d65362cadae153dcd
-
SHA256
2bfbd6325a207de88ce094688952f29d68f71e90a7ff7d49d644ed4448ca339f
-
SHA512
4ba9bccf9357d49c9ab31cff9e1c3c928a9344e4646ffad89e399338ee4a9df41ddcb6eb06e293ed7814d5fca275f6f030ad351269f7dac9d1e69e2a627c7918
-
SSDEEP
49152:PvpvqWOS0B7uN2UeqzSqujdRhzAIxve4DVdyDI+4nw3Vx3PPGEg7zS2LO:PhvqWOS0B7uNeqzSqujDhzAIxW4jyDI6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 953d201a9d87a0205a651dc2e29ef52e_JaffaCakes118
Files
-
953d201a9d87a0205a651dc2e29ef52e_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 986KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ