Behavioral task
behavioral1
Sample
b4799067b59072f4749f0bf1faeccbd0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b4799067b59072f4749f0bf1faeccbd0_JaffaCakes118
-
Size
102KB
-
MD5
b4799067b59072f4749f0bf1faeccbd0
-
SHA1
942ab9e589d8e883895f328e06e4c9879c1f8f53
-
SHA256
90dcc7335a53c2ba14120a12e1803e7b028dea8013051b6d026f4264b928218d
-
SHA512
7b5f509f3eb5cf1909b1f9950a715aab7595530e7890bd6b5d46f7446f4f314c9e0a954c9429c17d9b89e5eabea062b256de733255f2ad494999beedd38c7b7f
-
SSDEEP
1536:CLwIulMcc3zzizOUAs26GtHc7YYM5orZKbus4mAjRPU+Ismnouy8gG5tU:CLwlxcjzDURx4wM5o84VBkoutgu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4799067b59072f4749f0bf1faeccbd0_JaffaCakes118
Files
-
b4799067b59072f4749f0bf1faeccbd0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE