Behavioral task
behavioral1
Sample
b68bc027ddf9472705ffd7f1844e9f14_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b68bc027ddf9472705ffd7f1844e9f14_JaffaCakes118
-
Size
222KB
-
MD5
b68bc027ddf9472705ffd7f1844e9f14
-
SHA1
f56e5d1c4b3b09c2dcf929acb5339c3e358cc17a
-
SHA256
cfa4d17633727c1a6b7385e893fce44078c63aa6e7af8fc4f12a7b2983e2ef7c
-
SHA512
0fd77bf164aa7e640c899a0b8c13641e8d31cf2dd21b3d14bed7c3c2dc4865d6671ec0b456580eb860fddb987de7d7bdb16b5163ec9fb19043f2933c9634f267
-
SSDEEP
6144:RjgMS6oUzZhSnNbGi/hYx+Vc3NbBO3Slee:6MoULSRGi/WBO0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b68bc027ddf9472705ffd7f1844e9f14_JaffaCakes118
Files
-
b68bc027ddf9472705ffd7f1844e9f14_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE