Behavioral task
behavioral1
Sample
ce252d6d15b69a28f1b6da45908dc18c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ce252d6d15b69a28f1b6da45908dc18c_JaffaCakes118
-
Size
2.6MB
-
MD5
ce252d6d15b69a28f1b6da45908dc18c
-
SHA1
fa7942d038ec1fabe1611a0437c43ebc87fa2dd8
-
SHA256
330769a49f26173a5c6d8d2480939bb3f57222aca36350e954717bc7ad282c20
-
SHA512
6deb9e7792e3a1d0aa62921bd117a795377a963f467f82e5fecc7cf1e0ccc9fcfcc4a324276d04b1e056decaed78d98b9cd3a92d5f84adb3bdaa5cbd3861ec0d
-
SSDEEP
49152:PvpvqWOS0B7uN2UeqzSqujdRzzAIxve4DVdyDIu4nw3Vx3PPGEg7zS2LO:PhvqWOS0B7uNeqzSqujDzzAIxW4jyDIq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce252d6d15b69a28f1b6da45908dc18c_JaffaCakes118
Files
-
ce252d6d15b69a28f1b6da45908dc18c_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 986KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ