Behavioral task
behavioral1
Sample
b266e415feeba7325ac817a62647ab88_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b266e415feeba7325ac817a62647ab88_JaffaCakes118
-
Size
325KB
-
MD5
b266e415feeba7325ac817a62647ab88
-
SHA1
a0b44f17080267d20cb28b0795aa74dfaf8cd3e8
-
SHA256
59bec4c883a660dbb413751519c3e48690d577336bd380f0264970c796ee8997
-
SHA512
7b60d45272ad23d109a21b85ce985603e36a62b0787138053ebfacca6cf5cb5e78253288d6c039a4d16c0b87fe4a023938cff8a7aafe3eabfb000be2eeece46b
-
SSDEEP
6144:ZVYmUKLuHq333hXy/SBExRzunE+PqMDGlxntLBwek6tyT4zA4Y:Z0U315B5nE+P1YtLB+6tRU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b266e415feeba7325ac817a62647ab88_JaffaCakes118
Files
-
b266e415feeba7325ac817a62647ab88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE