Behavioral task
behavioral1
Sample
c2987a52918a409b1f739a1e0da8d46e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c2987a52918a409b1f739a1e0da8d46e_JaffaCakes118
-
Size
21KB
-
MD5
c2987a52918a409b1f739a1e0da8d46e
-
SHA1
410a4e771721b18fa4c77096e16e4b42c442e4b7
-
SHA256
c59cca5814222dcfb6ecd92f75c4e23d4cc1f4780f056bccca8a8add1ce7aab7
-
SHA512
deb42acb8e522dfa119671836333ab966b8f4f2ee43f78b9c7d8d50a309978d4c23dc7fc2714a4c288af44dbd4a5e661ed3457e9f82791436da7f0e26224f809
-
SSDEEP
384:SvB9X/NsI2rSS+ye8VG+luIgdDNACHmCEXic7KQkMn8IWmwCU4IQt12hCMXEliT:O9lhSmKG+lKdD+CmT7glIWmwCU4J/2T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2987a52918a409b1f739a1e0da8d46e_JaffaCakes118
Files
-
c2987a52918a409b1f739a1e0da8d46e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE