Behavioral task
behavioral1
Sample
97679f787e049f11be7c5581331f3409_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
97679f787e049f11be7c5581331f3409_JaffaCakes118
-
Size
797KB
-
MD5
97679f787e049f11be7c5581331f3409
-
SHA1
84f1e7d2a4151a923bfaeaa6e0bb8d9c732f7ac1
-
SHA256
48cd674b96b87b4d3fc2e00f398d745b654145bc9293b566586172b1b1742d8f
-
SHA512
f08a1af66c836010b14cb9aad88d45b01cb3e070b28f20f89cba8aa77ce4ca221a7b77e66102fac4ebc1b3da92657c19bd1283d92b036ae31782dbceb857c665
-
SSDEEP
12288:euHdXrInRbM09MFlxFjr3Np7/ZqOVr21HoVHBtLHn/LiBPWHBnIbjgJoS:xdXaRb/M/1V4KjGBPB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97679f787e049f11be7c5581331f3409_JaffaCakes118
Files
-
97679f787e049f11be7c5581331f3409_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 489KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE