Behavioral task
behavioral1
Sample
d6a9ead47e02a752873e1759d617eaca_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d6a9ead47e02a752873e1759d617eaca_JaffaCakes118
-
Size
1.4MB
-
MD5
d6a9ead47e02a752873e1759d617eaca
-
SHA1
59e1d029777e4d6dc13d7028a49bd64da16e854a
-
SHA256
755f425f2ee8b47e61a47fd8d50155b34cbc8134d89648cb872d38bc5759a950
-
SHA512
3c1e80ef1a858e63e109376a19957910612290bc33e80812b95954a33f566b9982893ffa88d6c167fd50387a3f52acaaba80819e1282c617ec9646c03ee85141
-
SSDEEP
24576:qqMtmASNMu8VmbXMMhuDRx4pI45mW0tCy05v0V3t+X4LUN7CE1FqwSt2h/ZxNLPR:61VmoMC45hv5vMG7ve4h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6a9ead47e02a752873e1759d617eaca_JaffaCakes118
Files
-
d6a9ead47e02a752873e1759d617eaca_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 987KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ