Behavioral task
behavioral1
Sample
ce2b1bffc3bee1b193efd18725da81ac_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ce2b1bffc3bee1b193efd18725da81ac_JaffaCakes118
-
Size
928KB
-
MD5
ce2b1bffc3bee1b193efd18725da81ac
-
SHA1
2711e9f7593553147d53982aa63da28f420ee03e
-
SHA256
974d6af6c6c56946e0ab43afe7c98246737ca48c2cccf6d2722a25f091638f9f
-
SHA512
6c56335bbfacea8b8c2e2f96cba8eea240421069b618330ea51c1ee5b20ca5e724eb20608d300bd098fdd5fa6b7c77fd80167b58390863a4c16b9982fdea9f28
-
SSDEEP
24576:8A9ATU129D1et1DFkwkcK6uKilshF5y+daSp81:jyU129DsKwXKbKhTyaaS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce2b1bffc3bee1b193efd18725da81ac_JaffaCakes118
Files
-
ce2b1bffc3bee1b193efd18725da81ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 916KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE