Behavioral task
behavioral1
Sample
aabb7d687c6b86e8a6830c671c50246a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
aabb7d687c6b86e8a6830c671c50246a_JaffaCakes118
-
Size
2.1MB
-
MD5
aabb7d687c6b86e8a6830c671c50246a
-
SHA1
b292df9f0737796817e152cf7ef19ecf6b08a02f
-
SHA256
f12c1d85ce43a35b6b220d1daa48ae54195097d4badbbdff265c325d497b5b37
-
SHA512
449bdf7c812e8badca00b8a37381cfa2bda9f7252ff749051fb52887776fc8f6a804f15b5311f2546f0d6018650f73f6999a8ad44a0a1e48582db4d704d6ae70
-
SSDEEP
24576:sl0GTHyBhZOTSX3tnegiNhJbtZa2PfrD26YUok5Qt5Cafxa3m/j20:sl/THyBjtegiHZt82X/26YUCq3m7j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aabb7d687c6b86e8a6830c671c50246a_JaffaCakes118
Files
-
aabb7d687c6b86e8a6830c671c50246a_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1014KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ