Behavioral task
behavioral1
Sample
a007ca7ccc208424f58d5c5ab5115e93_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a007ca7ccc208424f58d5c5ab5115e93_JaffaCakes118
-
Size
480KB
-
MD5
a007ca7ccc208424f58d5c5ab5115e93
-
SHA1
3b9400a42733f647d0c183672efee84c346b446a
-
SHA256
fade60dc938f19b98034c7d9b49de85d3ba5f26bf10b894c1452d95a3f872b70
-
SHA512
bfc5e04609f8918dad0f842566a24afc0e0edd791bf8e0197f36389308c8de5f478f9f9b19bd4a37d02722d0f0d16869fa1dcc106f87b33e666e7d48f5b1e2bb
-
SSDEEP
12288:dPLn0t3cbND+dlZd4fEdOoEHPV+2ymQJe8AqoS:dPgt3csdlZd4HhvVdyN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a007ca7ccc208424f58d5c5ab5115e93_JaffaCakes118
Files
-
a007ca7ccc208424f58d5c5ab5115e93_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE