Behavioral task
behavioral1
Sample
c857aa527c55733dcddbffae64924b76_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c857aa527c55733dcddbffae64924b76_JaffaCakes118
-
Size
481KB
-
MD5
c857aa527c55733dcddbffae64924b76
-
SHA1
da9b9c511a19416071d8bbbcbbb3aaa086a7c222
-
SHA256
67fd4f3f03f36c3e8d3211934e848322b652e25a3e5e80261b2f86ef9cf3292f
-
SHA512
2820d6de84d3da366b78b36466c8d4ff383cdbdda7ceaf095dbf115c7bd237e369c0f439b2eeabd72de1274692bbb16927c3905b5c8e0613cdf66ddb33f73857
-
SSDEEP
6144:VG77fhrnuhy8BlF74kHbD8/nJOXvYjDnqtt0qceKgrL9ZxEX:Q7fhrkTB7bEJOXvAnW0qcehL9nM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c857aa527c55733dcddbffae64924b76_JaffaCakes118
Files
-
c857aa527c55733dcddbffae64924b76_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE