Behavioral task
behavioral1
Sample
c7e4bcf97bc954507d7974a0efd607e8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c7e4bcf97bc954507d7974a0efd607e8_JaffaCakes118
-
Size
461KB
-
MD5
c7e4bcf97bc954507d7974a0efd607e8
-
SHA1
4eb6cff522f1560568ca499ee17fde8114439882
-
SHA256
51fb2b61636296d5cb6e1bbf122186e9c6f539e36ed311d2a3589d66738af3f8
-
SHA512
799bc55dcebd64cacda5b0a3b820485e9a55af64ca3d20a9dad2387f101d7c992f7bc2cb1c8717662f06b175a565f21c3ef81db5a0d81ba289a3538de83e7aea
-
SSDEEP
12288:VJHX7DD8+bukO1kCCWUBvnOGqazxuh7R:v/IH2CCWUNOWu9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7e4bcf97bc954507d7974a0efd607e8_JaffaCakes118
Files
-
c7e4bcf97bc954507d7974a0efd607e8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 376KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE