Behavioral task
behavioral1
Sample
bde3ecd6f649cee3b7194e8c1599eaa0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bde3ecd6f649cee3b7194e8c1599eaa0_JaffaCakes118
-
Size
487KB
-
MD5
bde3ecd6f649cee3b7194e8c1599eaa0
-
SHA1
da2943dcd3e0ef11541b6279d6a24960637c7780
-
SHA256
3364f3a95e490c628061a6dd1563f793530c09355385b60e98ce612ec4ff9e65
-
SHA512
30e6179f76f32d94fc54072239cc5246d5ff5084ceca3675baaa5e7e2ad572dc3cf36ee6d7dc93fcdb630f0b6f34c4ac92e0b0cb452ad54d179785727f7005c3
-
SSDEEP
12288:sICIsF97Db9lh4IdqGo6hxS100veqHnHF4yLFi9oS:3CJP73h4IdqLOi00vDl42i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde3ecd6f649cee3b7194e8c1599eaa0_JaffaCakes118
Files
-
bde3ecd6f649cee3b7194e8c1599eaa0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 478KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE