Behavioral task
behavioral1
Sample
a3576da4e6d8620d074cb6b3851d458e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a3576da4e6d8620d074cb6b3851d458e_JaffaCakes118
-
Size
118KB
-
MD5
a3576da4e6d8620d074cb6b3851d458e
-
SHA1
6d1c370a1faf9e7658c8840de2fd04008ef57866
-
SHA256
618bec723c998599da5bea36592c21a52b43c7515915f8ad69e1a65bda1afc72
-
SHA512
8de4dd1a38ee9c3aebf27dadfd4110a6fc6f834c34524ab8e9cddff763ba377ce2adbc796a763acdb7f11fd20f66ee4435663bcdf2475dd338db802b7c12ef37
-
SSDEEP
3072:5Cpo/0chOR+01qHWzVTYRm0JjMJFxWy0ZTBIsMout:eIgR1qkxYR9tsFmTvMoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3576da4e6d8620d074cb6b3851d458e_JaffaCakes118
Files
-
a3576da4e6d8620d074cb6b3851d458e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE