Behavioral task
behavioral1
Sample
a3c332e9070767ee8955b89c79b2dff3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a3c332e9070767ee8955b89c79b2dff3_JaffaCakes118
-
Size
382KB
-
MD5
a3c332e9070767ee8955b89c79b2dff3
-
SHA1
36f478b21eef8f38397677c6a2136a6702e75943
-
SHA256
2313d8753654bc2052ddcb15f45bfb2a26ba43034d90d88f3c265a0bb86301bd
-
SHA512
0ed4d8ac71e45a92c0828c5988e0a26fb8fc7a7858f663f0bc1f8825c3e91948de6d7de567251d59d2bf409012250eb2775c13ed037c2a5f2decb77edad2ce05
-
SSDEEP
6144:Owb4WNiHDFO0lj4y/2rrxWyxg4b2ilot9sT6EiXJrmttcoSSOkA:tIHDFjj424b2SolrXJrwcoSSOkA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c332e9070767ee8955b89c79b2dff3_JaffaCakes118
Files
-
a3c332e9070767ee8955b89c79b2dff3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 932KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE