Behavioral task
behavioral1
Sample
b491aaac555aa888f94206457681c001_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b491aaac555aa888f94206457681c001_JaffaCakes118
-
Size
144KB
-
MD5
b491aaac555aa888f94206457681c001
-
SHA1
9ec1937fa7b9bcbdeb25aee69e2994ca6fae0e12
-
SHA256
6a9d7259602dc690067a76bbb3c6d2057e3ab986298050810f55c293a47c4c78
-
SHA512
110844a3ff950c42a58283e9c38a1c6811c8f03d0e70a888ca61abf6310e058986ca8fc3817d93360813f85fa99eae781e69739888ef4439c7cd56ea5013f812
-
SSDEEP
3072:Xgq58ZKDprIwJbeWP3DnaWEOBZfRIY3iphTrsvR225out:Qq58YDprIsznYi5IsgTruYQoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b491aaac555aa888f94206457681c001_JaffaCakes118
Files
-
b491aaac555aa888f94206457681c001_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE