Behavioral task
behavioral1
Sample
a54a16d7307a4712943598a1b695ab64_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a54a16d7307a4712943598a1b695ab64_JaffaCakes118
-
Size
386KB
-
MD5
a54a16d7307a4712943598a1b695ab64
-
SHA1
78b911d4f3ef325b65ae3080d119dfae09ccf5e8
-
SHA256
930de7a4aefaabcd3dff97c38ac3bbc6c64d7c5977d1e62ccaefdad6343f40bc
-
SHA512
28e771cd6fc37952a976053f9d7c0d9cd98b43a5ee2578ab1237939358373ec6d79a1c9ca325c685938d02d08c4b2f55f21ecfb46ff2fc004fa006f656980601
-
SSDEEP
12288:59xZ5yN3Cwaw//ikDju436I26h+OoS9Otn:59vsky/7NKDm+1n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a54a16d7307a4712943598a1b695ab64_JaffaCakes118
Files
-
a54a16d7307a4712943598a1b695ab64_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE