Behavioral task
behavioral1
Sample
ae74bb31ede06fa182643b30808d47d9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ae74bb31ede06fa182643b30808d47d9_JaffaCakes118
-
Size
472KB
-
MD5
ae74bb31ede06fa182643b30808d47d9
-
SHA1
c528b18bf082f6435e7e85f818bfa3b3b77bec29
-
SHA256
4117a74a169279652173c28249754754dd78f4f8927d3be9460ccae408f0595b
-
SHA512
c4375c42ef7163c88f06a60bde214932d431296270ca605c6b40866259e22ba8f1a719ec10b0e48002d6dcb9261285bd4f8709eb7faa76f8ee34dc603c186a17
-
SSDEEP
6144:ElPy2bbpM+16q6HQoGBXVNYbQHMF3oU68P6WcOLw0mkP/4WL4HmLBr0Gdx8:lmS+1yHYRVNYPE8P6bOL/AAFBr0GA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae74bb31ede06fa182643b30808d47d9_JaffaCakes118
Files
-
ae74bb31ede06fa182643b30808d47d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE