Behavioral task
behavioral1
Sample
c7e9d9a2de9b7892f5e26095efb7eeea_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c7e9d9a2de9b7892f5e26095efb7eeea_JaffaCakes118
-
Size
297KB
-
MD5
c7e9d9a2de9b7892f5e26095efb7eeea
-
SHA1
2a71545789c55a1723ff2cfa87ab79c26b848f29
-
SHA256
0f5a915619a35712181a720c2608d0cf49d2fb416fb12e32f6a5780330b0ebde
-
SHA512
1ca7dddcf925d9ccee8037420e2bd2c2cb5484a7fd691ff94b39a16d50cac2081f18b2643bce7207e16aebe68afebc7da926fbb1591de56162c6f245e2eb12b4
-
SSDEEP
3072:seBzFq20uIxFo6rmpqEcB3nHCw7j4vPIbHpxtzA3kIiLFx68wykqD0sV4yNavj+n:wuIDn2uEnIlxJLL2ygvj+iLr9Mr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7e9d9a2de9b7892f5e26095efb7eeea_JaffaCakes118
Files
-
c7e9d9a2de9b7892f5e26095efb7eeea_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE