Behavioral task
behavioral1
Sample
c1ff2aebcae293b668a3ec29e922eea8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c1ff2aebcae293b668a3ec29e922eea8_JaffaCakes118
-
Size
237KB
-
MD5
c1ff2aebcae293b668a3ec29e922eea8
-
SHA1
6186a65930562aba8534401ad2a46d43fec3bdcd
-
SHA256
9686bbaa8212e50789b987c3b768a121d5e775f048d77c41af47efd030d491e8
-
SHA512
d2328f0ac59d8070668db764b003dab994ce375e134558962d3692253824d9c210b41a278f6e280e82007ef85958e5a8ed40ad73e426f0c7c85f264d2eec7ed8
-
SSDEEP
3072:/6Fm+MtOhR2C2fgsEycixSpecD+qrYsBpNbOQuc1Yt:SFpMt22PEycixSUchcsBpxOQup
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ff2aebcae293b668a3ec29e922eea8_JaffaCakes118
Files
-
c1ff2aebcae293b668a3ec29e922eea8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE