Behavioral task
behavioral1
Sample
ac35377b60f54066be4d38e9a24005a8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ac35377b60f54066be4d38e9a24005a8_JaffaCakes118
-
Size
167KB
-
MD5
ac35377b60f54066be4d38e9a24005a8
-
SHA1
3ae7e171c32c121d160749c6e06a6ef68dea0e46
-
SHA256
9b4e1587f440885ca8cbd504afafcc63f49a19fa0054093715ba8e2fde599b21
-
SHA512
199f456b13d411d3ff7fb4ea695b4ba32352dee61862c554b23b646ec54e4561df3eb68fe84d343a5d3d3ae9702b0b14f4c7c0efb76faeed99b4aa698180a229
-
SSDEEP
1536:MDjuot5Do4wFF8Iu9BjNWB9wHbVznouy8GxPclP/0onb:kjuY5HwFF8IuDjtJLoutrz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac35377b60f54066be4d38e9a24005a8_JaffaCakes118
Files
-
ac35377b60f54066be4d38e9a24005a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE