Behavioral task
behavioral1
Sample
95f451d915b3c108708b03904e89d632_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
95f451d915b3c108708b03904e89d632_JaffaCakes118
-
Size
201KB
-
MD5
95f451d915b3c108708b03904e89d632
-
SHA1
011f2516abd3a52d44fd98bde897ec97d80245ad
-
SHA256
d57b625632a0776df734d1d23170193ef6ee161e0d378bda9c25518d834474a8
-
SHA512
b6bc46bb10a0aa1973d2a39ddf7547d572618e4b3a5f0773c566bac8589183e547c71b71c4868c2e898849f000995b4804c782a09bc7af52f70259ee2999ead3
-
SSDEEP
1536:SCEgIW9ZDv7fygakhDn9fzSthxMisbEktCBC96On:S+IWPT7fMk99fzStjMcqCBC9H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95f451d915b3c108708b03904e89d632_JaffaCakes118
Files
-
95f451d915b3c108708b03904e89d632_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE