Behavioral task
behavioral1
Sample
a60dc358d21dddde8222ca2dcd5a060f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a60dc358d21dddde8222ca2dcd5a060f_JaffaCakes118
-
Size
299KB
-
MD5
a60dc358d21dddde8222ca2dcd5a060f
-
SHA1
2879c3243427adc77c4cd1199f69017095eaac4c
-
SHA256
4889c1857eea46f007cf4d9b18a6822d39ece7dcc462a601ad7cd7147cc082b1
-
SHA512
df3930f595e584c55d6136de205c1df91885b2c00257cdaf5a3511253e5c36f846ea6ab055aaee1db4969ab4232b6beb2db0208b79d268e41ab1f9d3b3ce10a3
-
SSDEEP
3072:paDyb8cW6t1hmgcZ1E/6Y1ADihYbme3UJWEBwRacprjmK378+bhPyVKsYvsR9vJe:g28o1EnY7hWrUwHaiKMHbhiKsBBiB4k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a60dc358d21dddde8222ca2dcd5a060f_JaffaCakes118
Files
-
a60dc358d21dddde8222ca2dcd5a060f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE