Behavioral task
behavioral1
Sample
aae592915aec5c18e6ca37bc164675ee_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
aae592915aec5c18e6ca37bc164675ee_JaffaCakes118
-
Size
178KB
-
MD5
aae592915aec5c18e6ca37bc164675ee
-
SHA1
c0f328374cbbf8eb9a3bdd22e7ee69dc339183f7
-
SHA256
5dc4db9c85c55459a3d1e5b046bee217a062574d501969e9b8dda20b15bb96ee
-
SHA512
adac3ca51ed943463a192bb96f335c72fff91bf58edb29f9c116ddcec79210580ab4278a949ae2eaea41ae2d60f6f059741c799fe20de62ff8a22f1c5ce754bb
-
SSDEEP
3072:zqtK+hecY6L4Lk2lcLsqzkajdFBjT4a5wEUDOf2bUmbbcReB4TYdgvCC/Ypg0:zMKpcYW4i7BP5wEwOZmcReB5rC/C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aae592915aec5c18e6ca37bc164675ee_JaffaCakes118
Files
-
aae592915aec5c18e6ca37bc164675ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE