Behavioral task
behavioral1
Sample
c1505149516835eee7afb1dbfe77a435_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c1505149516835eee7afb1dbfe77a435_JaffaCakes118
-
Size
991KB
-
MD5
c1505149516835eee7afb1dbfe77a435
-
SHA1
7a87ebf20f522c297b0a4146d4f466e0c8ac32cc
-
SHA256
17c8874aff2cff6a2f192ac9e6bd06d0fddc835185f15b88e924e751eeb9ac78
-
SHA512
bc35002e766320aad78025e3753ed135a343ea29fbf9e2ed561b337c39429c2c44c46245bd69f3c6d6bae7e70bbe3883d9e1a67f1cc37713ad72ca7e669bd06c
-
SSDEEP
24576:v48YQ3K59jebVrgtMerdtJT6ZNUmfFrVOlS+9b4DEYG8Al:g8YWK3KBrgtMGtAzUmfjAtuG8Al
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1505149516835eee7afb1dbfe77a435_JaffaCakes118
Files
-
c1505149516835eee7afb1dbfe77a435_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 880KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE