Behavioral task
behavioral1
Sample
b8ae97cf22e734bc97af4e395ac0b60d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b8ae97cf22e734bc97af4e395ac0b60d_JaffaCakes118
-
Size
279KB
-
MD5
b8ae97cf22e734bc97af4e395ac0b60d
-
SHA1
1be4e76401cb5517c6b9f7452015fbb67ed9b804
-
SHA256
f385f7ce9d58f81c3b8344661d43b4b07c4cedc6f02e06ed6ef9742789bb4167
-
SHA512
65d2cb74dd0e9698722d25a41ec10b649e3b59e471891e26709552ebdfabdfa4c73c78c29e2b3e2e842a42770e999cb5dd9b994f364c11355ba9a7fff6263dd2
-
SSDEEP
6144:I6uzM2tk76GuJ4/Pi+IBRa/pDFZOyqvtoWz2QseToSOIc:I6VA+DumPi3jgnZOlzAuoSe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8ae97cf22e734bc97af4e395ac0b60d_JaffaCakes118
Files
-
b8ae97cf22e734bc97af4e395ac0b60d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE