Behavioral task
behavioral1
Sample
a59cc5b6242aced0007447f92c6eb49d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a59cc5b6242aced0007447f92c6eb49d_JaffaCakes118
-
Size
216KB
-
MD5
a59cc5b6242aced0007447f92c6eb49d
-
SHA1
179169fada275ff3503101ab06586c4e6fbfebde
-
SHA256
e9d354b7c4047044e1025f211fc89d57a83b9cc31936a5ff62994693235d55d7
-
SHA512
a4ae4fba3a41dddf388d64bb17458ee85b8694445ef37976377a16c04b8e2d64c966677dcd98526e72de52d715d3c6a1264a415d2ad69b2278d353bedbb6bdd9
-
SSDEEP
6144:7NCzLYXnXmUhko3w4ge971kk3YEJ9aghoSReT:7NCzLctvw4geda87JYghoSReT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a59cc5b6242aced0007447f92c6eb49d_JaffaCakes118
Files
-
a59cc5b6242aced0007447f92c6eb49d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE