Behavioral task
behavioral1
Sample
c004d81faa368b3f64c55d62d55e799e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c004d81faa368b3f64c55d62d55e799e_JaffaCakes118
-
Size
99KB
-
MD5
c004d81faa368b3f64c55d62d55e799e
-
SHA1
9ef6be26eef3edd810952f770e3d3bc942002905
-
SHA256
d614169703f098a838fb2a433bea60ee8c6201a8e95b155360ec0c57e40cc45e
-
SHA512
26b04417fd92f03cd5ee33bef229f0a61316228ec7a388184f10918b0a79be105307a43a6ebdac43bbc64153809c80d11364418f00317e39a5176a3a644399b5
-
SSDEEP
1536:HNM1DWlO1nABMFcrisYjB7GLLIkT3M6janouy8oG5tk:HNM1DWlMnABDdIkVCoutoO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c004d81faa368b3f64c55d62d55e799e_JaffaCakes118
Files
-
c004d81faa368b3f64c55d62d55e799e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE