Behavioral task
behavioral1
Sample
ab51e7d1206768ac7cb080b7669e4507_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ab51e7d1206768ac7cb080b7669e4507_JaffaCakes118
-
Size
183KB
-
MD5
ab51e7d1206768ac7cb080b7669e4507
-
SHA1
8edfa669ef309a4b329cc109d6a90a3ab6635e71
-
SHA256
a1af1187d0d90dc13f73aa9f01e23bef0a9fe29804c5c19537ce43d7ed2c649b
-
SHA512
a5f8d03848925790c21ab27f28a7d47429cd188c807d7702a47067dcf983adabee7297dc7c3e8e143c5b4a72044db7888b5589f7811bd40d0c81cc9be11a71db
-
SSDEEP
3072:/9IxCZkIMJ45FlxmN71ySIrDG1zPw3jjhHoH5RPiQN/tUMuxsezGJI62ddQ7:RX5FlxY1yS6ypwBHoH5xLuQ2ddQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab51e7d1206768ac7cb080b7669e4507_JaffaCakes118
Files
-
ab51e7d1206768ac7cb080b7669e4507_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE