Behavioral task
behavioral1
Sample
b6a33cc953c6eb757fac335c00def5e2_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b6a33cc953c6eb757fac335c00def5e2_JaffaCakes118
-
Size
464KB
-
MD5
b6a33cc953c6eb757fac335c00def5e2
-
SHA1
22adce5c21c3ea21d45eb7056fdf20e4f3c06294
-
SHA256
4509fc1812a4b56815d07602161b3b657240451a1c33ad79cc751b9909a78fa0
-
SHA512
fb5930afc2cda32bc03a5fb8f66e0865cc0d622e7a50a13688c9846ed2a75fa36fbde7effd49e56d636b024ce04ffbcec5b08c6d2087b5b2bbe6bcd855609778
-
SSDEEP
6144:gmw8Va2zdg6iY3HLTy9jZRaEN5S59l9viXPrmX0tr6IfOruf9hwfjjQ6iT7Z1Z:yYHigHLTyfRVGX9vwzic6IfZlhwfjkz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6a33cc953c6eb757fac335c00def5e2_JaffaCakes118
Files
-
b6a33cc953c6eb757fac335c00def5e2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE