Behavioral task
behavioral1
Sample
a73ade88842184f32b10ebe0be38a22c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a73ade88842184f32b10ebe0be38a22c_JaffaCakes118
-
Size
478KB
-
MD5
a73ade88842184f32b10ebe0be38a22c
-
SHA1
dd21a89f69552507c4742fecbe9420dd6ba9fac9
-
SHA256
f3cbe5d697b1ea38cda2078833923cb6646e3ca46c7da681a5271d13d41343b2
-
SHA512
61f395fcb07e5be1994cedcbd9781d8cf86ac2d34158ab7e44a49c9118fd86fddd97f7161d9eafd9fe1a16d5165aa9c8c5b869f7bef4efb5210c85405e3bb074
-
SSDEEP
6144:gOLQC+kV/jJt64aHs0WbXvyN6Rt3poonMJI4hA1ggvExeM7:gOcC+krI43vK6f5nEXhJg8x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a73ade88842184f32b10ebe0be38a22c_JaffaCakes118
Files
-
a73ade88842184f32b10ebe0be38a22c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE