Behavioral task
behavioral1
Sample
ab47083e62689edc773e6b91a9aee9ad_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ab47083e62689edc773e6b91a9aee9ad_JaffaCakes118
-
Size
2.6MB
-
MD5
ab47083e62689edc773e6b91a9aee9ad
-
SHA1
de42101e6aa2062ab3c26dc8499e5ff704362e36
-
SHA256
2da0e89d77f9a964ae091ed03e2c81d8b2e7d1154dcbfe6ad553fc54b91823e5
-
SHA512
b50f757d295ee40878c6b180e8f05c031f735d7b2519c0dcb6f368d9823ff0ed5af82e1cb3b81c81c50f062d9c2e098ab3f5f6dfeaf0bcc48c77c979efc7751e
-
SSDEEP
49152:8A/k2zg1k9uliie94Ave4D7vd3EL0yJMWSPv8:8ook9ouHW4SIyOW+v8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab47083e62689edc773e6b91a9aee9ad_JaffaCakes118
Files
-
ab47083e62689edc773e6b91a9aee9ad_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 962KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ