Behavioral task
behavioral1
Sample
b42801b163538375ed032cc3972b9c17_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b42801b163538375ed032cc3972b9c17_JaffaCakes118
-
Size
1.9MB
-
MD5
b42801b163538375ed032cc3972b9c17
-
SHA1
de9a5b85077620bf9387567006812e7aed2ab8d5
-
SHA256
0d451c979a524255f49083ac6ad58171ca37384186c82c600896c6a29af13543
-
SHA512
3997b69b398d02684b2f3b0f92ff89ad50554e081fdc7d0034791ed051df0eae9bff601218434a3b29e3dbbdc8f752509027a6eed3df57a93c712195a23c4e65
-
SSDEEP
49152:HvpvqWOS0B7uN2UeqzSqujdRgzAIxve4DpNsBniKpfKynky0lu:HhvqWOS0B7uNeqzSqujDgzAIxW4QBbnN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b42801b163538375ed032cc3972b9c17_JaffaCakes118
Files
-
b42801b163538375ed032cc3972b9c17_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 986KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ