Behavioral task
behavioral1
Sample
a215643141dd63cb43e8a37dece0d881_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a215643141dd63cb43e8a37dece0d881_JaffaCakes118
-
Size
464KB
-
MD5
a215643141dd63cb43e8a37dece0d881
-
SHA1
6767733d25e22b66866a98c1688f9dda0ad83090
-
SHA256
d58e734ee520966bb09754eb194e4bcdac955bf1cfe6bb33260af04128581b0f
-
SHA512
3413c1c8010ddd8912c8dd7df2b8756e80f2fd9cdb78386d3d9298743f5e414a51d4e3baa0ebea7b260785a986ae62362eb0ba4e91526a80fe9e658ff989e13e
-
SSDEEP
12288:X1/VJbyn5T+0R9BM8EldRkmGFRi5015P9UM:dbyn5T+0R9W8EldtU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a215643141dd63cb43e8a37dece0d881_JaffaCakes118
Files
-
a215643141dd63cb43e8a37dece0d881_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE