Behavioral task
behavioral1
Sample
d21dd5d46712cbef3b1cec1c74a991dd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d21dd5d46712cbef3b1cec1c74a991dd_JaffaCakes118
-
Size
935KB
-
MD5
d21dd5d46712cbef3b1cec1c74a991dd
-
SHA1
ccba294c2c0b88821506f8a7bc6e1d0dedd9614b
-
SHA256
a5e42e563a2b1d1d7bb96d67da7fc4d7def670f4960e238dad99c50a55647cb2
-
SHA512
541c9b087bec98ad47e7b4381c54706e3d2fe7ef151e5ad4d43c0bc429c67d3d9bdc4a31410ffaf58fc17b35ed4695241b738059be8a9ceff4fa41808b65e266
-
SSDEEP
24576:DE/HLmv/DtnIP5NWmqBBhFlRYj/dEgbU7mFi/WLt8JTkP:Wmv/BnIP5NWPBxQj/dEf0eWLW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d21dd5d46712cbef3b1cec1c74a991dd_JaffaCakes118
Files
-
d21dd5d46712cbef3b1cec1c74a991dd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 916KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE