Behavioral task
behavioral1
Sample
aa39076770add7dcc02c8561a3632cc6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aa39076770add7dcc02c8561a3632cc6_JaffaCakes118
-
Size
461KB
-
MD5
aa39076770add7dcc02c8561a3632cc6
-
SHA1
8e38fa5799e8dcf5b941aba167dbd1f1dae2717d
-
SHA256
c602ce538ba8195a38e6d51f05a6a28dfb318fda816d02fc2d684f02a0db675d
-
SHA512
709ca1991eb147aeea5784b2d977dec09967b75d199f8ed4599f6adba1aa288a79a564eb95b350be8143e95de7db7a99b555e65366d5a1e772674cf9babe3074
-
SSDEEP
6144:4PGqSOZo/N181nnm+EL+aLy98FybiISUEIrzZXnR3NK1poeIn6rMElSSL+VFDkLL:77OS81nnkooxvUE4hnPypoeIn6rb+m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa39076770add7dcc02c8561a3632cc6_JaffaCakes118
Files
-
aa39076770add7dcc02c8561a3632cc6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 368KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE