Behavioral task
behavioral1
Sample
b4beb2d36c8a4f9eaab5d49a9dc56af0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b4beb2d36c8a4f9eaab5d49a9dc56af0_JaffaCakes118
-
Size
333KB
-
MD5
b4beb2d36c8a4f9eaab5d49a9dc56af0
-
SHA1
2b4411ef6fb02d839f4f4a53e6b2005c76f69c8b
-
SHA256
43db7ae97b27b500cbdd1c46d71585f6a55c73e64d57e298b3ffc9c1ab652ffa
-
SHA512
d0246936a1f0cbbf871c0bd0de7aa639a953498c0c6c44dd0211c6c9bc6929c9378292c3285c410e2bdb2320ff1ffa2a29c57bec2cbf6e6ce97fc2abeee9b6bb
-
SSDEEP
6144:Zq/7FHv4oAEgLjssTFa/XVshthfgyHgw/q+hJWeHzjIUBKl8oSin:EB7AEgLjEPVshvg0F0ocUfoSin
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4beb2d36c8a4f9eaab5d49a9dc56af0_JaffaCakes118
Files
-
b4beb2d36c8a4f9eaab5d49a9dc56af0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE