Behavioral task
behavioral1
Sample
ce4d16b80831216b6b4498adf5ec88fe_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce4d16b80831216b6b4498adf5ec88fe_JaffaCakes118
-
Size
302KB
-
MD5
ce4d16b80831216b6b4498adf5ec88fe
-
SHA1
1b9dd10965397d1810bdc7abf3af498e0582427d
-
SHA256
16c9011e0bf0f413969c1e2804399f8ca330b2a25c5eb90aca7753b40f93734a
-
SHA512
2381764eab4bf4ed9b16667e17201afaafa9ddf1d1efd173f72f235db1ae57f57debf20b983dae1465750bc6d929fcb5d17b7975ea08f229acdb2e3f2ab35556
-
SSDEEP
6144:ITqONHHGWeqO2Ua1yu4ixbpP8WAKdMbqOOSfz:ONHHoqO2Ua1jpxbaWZez
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4d16b80831216b6b4498adf5ec88fe_JaffaCakes118
Files
-
ce4d16b80831216b6b4498adf5ec88fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rzxdjaa Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE