Behavioral task
behavioral1
Sample
b9829a9529cc21d98929c8a9ae2c6d10_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b9829a9529cc21d98929c8a9ae2c6d10_JaffaCakes118
-
Size
3.0MB
-
MD5
b9829a9529cc21d98929c8a9ae2c6d10
-
SHA1
d52a748fb508042ac28c635bd53dada0dcc5133e
-
SHA256
4cb2e9f4f1e1bd569cf49dae2cd38afe3b9fb04626d3c258421db7873ede84a5
-
SHA512
98b6d819fe5e494bccd31540fa512ad744e2088277c2a8021fc5a24cfdce01ddc6f1b6d1712713971ab8068fd9c7f80cb1184157a7f058c11db76229bc52269b
-
SSDEEP
49152:U72KVUtib1vA5ruk/XAdxuRpAy7W7UFpv9lKDgoJAcSxsca5w/SfcUgMIyKId7B+:22Ko5ruk4Mv7nvHKFAJxsca5MEczMIyG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9829a9529cc21d98929c8a9ae2c6d10_JaffaCakes118
Files
-
b9829a9529cc21d98929c8a9ae2c6d10_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE