Behavioral task
behavioral1
Sample
c0b5a75eb20d8584c9a1a6da1210dc2a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c0b5a75eb20d8584c9a1a6da1210dc2a_JaffaCakes118
-
Size
120KB
-
MD5
c0b5a75eb20d8584c9a1a6da1210dc2a
-
SHA1
3bee41d5668eb245ad65a9bfcd0db5c9a46feeff
-
SHA256
6fa2cf8374c800a5661fa09215a835fde9d8d62624b2a2167de0e5c17f437748
-
SHA512
2183d26ef4eb63470e9e60bcc7ed8e3ab6079d37266509466330d783b7cdc9e0cbc898eed297b3d5abf787a2cac2c119569d4ae4e82e923f190c194c3a1eeb25
-
SSDEEP
3072:n80SO3VqLL8W/jTLdTBzJE0pCtagvI2zoROU:80SOUUWLdVzJE0KQmwV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b5a75eb20d8584c9a1a6da1210dc2a_JaffaCakes118
Files
-
c0b5a75eb20d8584c9a1a6da1210dc2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE