Behavioral task
behavioral1
Sample
a5cdda96c17e86d93bde85e223319a74_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a5cdda96c17e86d93bde85e223319a74_JaffaCakes118
-
Size
211KB
-
MD5
a5cdda96c17e86d93bde85e223319a74
-
SHA1
095b99fdb3463aa0e93d62484f9e8f0f3bf32d71
-
SHA256
145beee5247dd512ca8c5c849f70e194fe3f92f4e007380721b5e5d0458a9889
-
SHA512
7c723de4878b61631a8307f4f36377d34c755aa2b9aaf4fdd18b0eab64adb2a3231c2670866f79a65de14361cb10848b244d02a457ce241cfe4b19bde66d678e
-
SSDEEP
6144:AulWzNwxa/ohXWpfY9/S0urRn/k7VOtPO:AjNIwyS9X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5cdda96c17e86d93bde85e223319a74_JaffaCakes118
Files
-
a5cdda96c17e86d93bde85e223319a74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE