Behavioral task
behavioral1
Sample
b8b7f21c1d49aae64f3d920cf2f2e022_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b8b7f21c1d49aae64f3d920cf2f2e022_JaffaCakes118
-
Size
481KB
-
MD5
b8b7f21c1d49aae64f3d920cf2f2e022
-
SHA1
4b370cc376d8afe1113269f650869100580113e5
-
SHA256
d6c5b88f70411658bb4b29df1e2c10b265701e1291624cc58b098fd6a16eb3f7
-
SHA512
64c5c2c418665764a15cdd42126f1b902bc3119e6058369b731619933854198c04a58f19ab9b9b823357bee77de8d59b13045663e51434ae67f8aa077707dc71
-
SSDEEP
6144:8G77fhrnuhy8BlF74kHbD8/nJOXvYjDnqtxVxwgloKgfEYKR:h7fhrkTB7bEJOXvAnYLwglotfEd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8b7f21c1d49aae64f3d920cf2f2e022_JaffaCakes118
Files
-
b8b7f21c1d49aae64f3d920cf2f2e022_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE