Behavioral task
behavioral1
Sample
acd2e461ce169b25c6d04edabc7db4dd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
acd2e461ce169b25c6d04edabc7db4dd_JaffaCakes118
-
Size
532KB
-
MD5
acd2e461ce169b25c6d04edabc7db4dd
-
SHA1
eb3b1ab4992f102441476cc27b5098dd18e478f3
-
SHA256
7449459dc95372795e84834e8cd64e4e659ae892f82ad817625a82ee5580de92
-
SHA512
98ea2c23343f841e2aa0f00228790046d72f597a198f22aa68de94ce555a1617d2f4513d8e5d495b9cc2285b6edb0fa51b31514efef33b5bde863afcc406f8b8
-
SSDEEP
12288:0jkArEN249AyE/rbaMct4bO2/Vp1bXrTQTgfs1p/+5cwPp/VQYs9r:XFE//Tct4bOsT1b7Tve/++wxKYs9r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acd2e461ce169b25c6d04edabc7db4dd_JaffaCakes118
Files
-
acd2e461ce169b25c6d04edabc7db4dd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ