Behavioral task
behavioral1
Sample
a01fece436718929ac6f45068e6eb02c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a01fece436718929ac6f45068e6eb02c_JaffaCakes118
-
Size
379KB
-
MD5
a01fece436718929ac6f45068e6eb02c
-
SHA1
6b221380cbedd47ccdca5169fa650b68cf9dd201
-
SHA256
606fd5a5192a161cc0a2d56402e7b508b63848cd485b9a1d0059467b7393a630
-
SHA512
dc6328e25fbfdf681255edd5b4303d4d12ca0a06c9ac9f05d2616372758670f81fab745b23dfc1a1238377040f0e39545e29f4d13623631ef7751c8e121d1037
-
SSDEEP
6144:Y+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LEd:Gs03z8tgkGJRxpw4osO2JoS0LEd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a01fece436718929ac6f45068e6eb02c_JaffaCakes118
Files
-
a01fece436718929ac6f45068e6eb02c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE