Behavioral task
behavioral1
Sample
d58f33b11bfa48eb55cf80c2850a5ebc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d58f33b11bfa48eb55cf80c2850a5ebc_JaffaCakes118
-
Size
93KB
-
MD5
d58f33b11bfa48eb55cf80c2850a5ebc
-
SHA1
c18af32b8be39656f9d44f082759fe7816c189ba
-
SHA256
518290c5a98070c273cad8d33e445863d58217eceb20e12739abfb492fec1d0e
-
SHA512
e35985e949205f0f36e1cf3455391373817daea0fecd41e90ca66e91956ba0ab7bb19e82a4cd1787c2a589126e6c32a2c952c369f633a0f3719795cf90576ba0
-
SSDEEP
1536:Dri1h90FEt7ymvITtI+WOck5ZTpsgkW8CCjnouy8YultB:AhymtemATWngZ4lCOoutYy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58f33b11bfa48eb55cf80c2850a5ebc_JaffaCakes118
Files
-
d58f33b11bfa48eb55cf80c2850a5ebc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE