Behavioral task
behavioral1
Sample
a7717aca691d783500fc13d8c1da5151_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a7717aca691d783500fc13d8c1da5151_JaffaCakes118
-
Size
195KB
-
MD5
a7717aca691d783500fc13d8c1da5151
-
SHA1
564b71b6f3f09bc641bbbe07a7649472f7544e83
-
SHA256
1d5fb7792a52aa5708853f599b50d845f17b0eb1727ce9502716c6458400babb
-
SHA512
d8470ecde1d62d24cb7b1a03bec9cd642dbfbed544b5403ef657bf500388384afd74d57c3aac475cbf03ef92922fa67317e2f1cd9ab033a597605c16002a2c3a
-
SSDEEP
6144:Jr8tA9HjaqvwO/FxOHjFlQDZTqR1ZJqkgGrS:98tSHdvwO/EWZOjZJpPrS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7717aca691d783500fc13d8c1da5151_JaffaCakes118
Files
-
a7717aca691d783500fc13d8c1da5151_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE