Behavioral task
behavioral1
Sample
96c4534134765104c3dd655190a6606b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
96c4534134765104c3dd655190a6606b_JaffaCakes118
-
Size
101KB
-
MD5
96c4534134765104c3dd655190a6606b
-
SHA1
116f2af73fa5cc56de1451e5f7479b7db33c60d2
-
SHA256
91b367479a3b74e96b3798f452e16ab3f13c9889288884581807d76a02920bfe
-
SHA512
670f782e35355b4c93b8593c21968ed5dca5cb883aa8049600a95a737513d7ecfee2e6b33ced8ebaf69ddf720f52aa2c1635f82435e00a70a3ee8829d7da4f15
-
SSDEEP
3072:uPtxr0egwJGkNHB/Xa3FlGgn1Enj/outB2:a2wd51a3FlT1EroSB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96c4534134765104c3dd655190a6606b_JaffaCakes118
Files
-
96c4534134765104c3dd655190a6606b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE