Behavioral task
behavioral1
Sample
c0ae8ec66ac48ecb47998d9fafb32a26_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c0ae8ec66ac48ecb47998d9fafb32a26_JaffaCakes118
-
Size
270KB
-
MD5
c0ae8ec66ac48ecb47998d9fafb32a26
-
SHA1
504e37d5325622be07f25c35efb6cc90b70be5eb
-
SHA256
2062af6d3a1c218337ed80cab19fb3c6613028bd84da950ce05e00ce91a544dd
-
SHA512
05c3903bdb084d4cd80def67b0679ee346da38754379c7e56f1340704973ecef88f209651e6d21712e8530018aa6d6c6e422df2199abd1ba553dc03b3819f381
-
SSDEEP
6144:cY8SAzR8drKln4FKzZR2gI+9pdsSky7j1lIoSNoZ8:cYMXln4SZRX3dsSk2YoSz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ae8ec66ac48ecb47998d9fafb32a26_JaffaCakes118
Files
-
c0ae8ec66ac48ecb47998d9fafb32a26_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE