Behavioral task
behavioral1
Sample
a659f621aafd5687f36936b31a9fb5bb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a659f621aafd5687f36936b31a9fb5bb_JaffaCakes118
-
Size
451KB
-
MD5
a659f621aafd5687f36936b31a9fb5bb
-
SHA1
b0f07ebfd76b7822cc32455ec494a2eb6cb9fe5c
-
SHA256
08f4560783525d1db6b5642c83c036f807ce49abecca244a587ec3c2ea02f1f4
-
SHA512
63b3f6fddbc418b0e44f8f8a1e4c7b676becacb0754fafb2590c7c98e23cc352fe9ce4ef39da2e9bd7f4ac2a63670e304414a77a7e9f2dbca0d1d29f293d6c2d
-
SSDEEP
6144:sjwai8S9fypkW15UdzWkTSYAHRgDbPPZulkypk5xv9fanqsgaXkYDrtTgWJj:ska0fyP12dWk247ZWkypkLwn0IJZga
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a659f621aafd5687f36936b31a9fb5bb_JaffaCakes118
Files
-
a659f621aafd5687f36936b31a9fb5bb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE