Behavioral task
behavioral1
Sample
b95754bcd06455eb3e2ff4a20db3c6e3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b95754bcd06455eb3e2ff4a20db3c6e3_JaffaCakes118
-
Size
212KB
-
MD5
b95754bcd06455eb3e2ff4a20db3c6e3
-
SHA1
a8578bf8fe7e21d77ccc50ece9c96dbe7da57fb1
-
SHA256
92c52c576254a68a7dd55fdaa8d192449f81599e834b9e5287252437609d8009
-
SHA512
bb907fd81b0a212c74bab49f3832c0420fb0ccc14a90c2f97c1e362a68cf364c41f9195faed1096d9a2553c047a731a2ef8c9854f9a047e5b2fc863688266dc5
-
SSDEEP
3072:NS7q3onV3K6AwlmIjrDp5ofzSy6RwAbho+I53YElW6Aerx6XAtEqFEcrq:4vtmCrVQzIlo+gBWnerxaWHr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95754bcd06455eb3e2ff4a20db3c6e3_JaffaCakes118
Files
-
b95754bcd06455eb3e2ff4a20db3c6e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE