Behavioral task
behavioral1
Sample
b5e32ebf3e0bb1f2cdc2b251ce4dd606_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b5e32ebf3e0bb1f2cdc2b251ce4dd606_JaffaCakes118
-
Size
386KB
-
MD5
b5e32ebf3e0bb1f2cdc2b251ce4dd606
-
SHA1
506f3ce2b6faa0736f8c9b701c5bdeddc9333b6e
-
SHA256
6fb709e00dda2730223a582fe19487081cde834e0b087c92affd17c971f7a967
-
SHA512
d61b2cc6a6dad61df1165714070f791b55fbc6c2f029f4ccd2423670a44518abdaa61befe1ef17bd7a0196d3aee3737b235ad57d1f138727239bd33adb23f97e
-
SSDEEP
6144:yhJhWT3UEIA1CqzU75aDdrTPbNZAXdPRh2IQLtL2yy02V3IGcIFoSe8OIw:yzhGqAQqzU7GrTzNZeNAl2yy9BoSZOIw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5e32ebf3e0bb1f2cdc2b251ce4dd606_JaffaCakes118
Files
-
b5e32ebf3e0bb1f2cdc2b251ce4dd606_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE