Behavioral task
behavioral1
Sample
d2d532eeddac4d19e952b364bc0b6909_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d2d532eeddac4d19e952b364bc0b6909_JaffaCakes118
-
Size
4.3MB
-
MD5
d2d532eeddac4d19e952b364bc0b6909
-
SHA1
b899b062d94aeee5a88f3453bbd78647060c6855
-
SHA256
a1ae45411b7992f9ec59d5e381fb0d87a9acbf06c7ae5e323255778377f13241
-
SHA512
e6a4a6263951bc021b6d72cc0074e3f5a94dff8e977bb12f39eaf09e406accc37c0e72d779463c8705f41ec25cc5b99743ab0785bc9bb82a5e4ceb107bdf0f18
-
SSDEEP
98304:udI8FSmHFa7+/zqitNiN09x90NVFNI9+625G5XxKlfo:EjxzLNeIx9MFNIs625G5XCfo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2d532eeddac4d19e952b364bc0b6909_JaffaCakes118
Files
-
d2d532eeddac4d19e952b364bc0b6909_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 964KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ