Behavioral task
behavioral1
Sample
dcc36b5c6293c43621244384322dc8b3_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
dcc36b5c6293c43621244384322dc8b3_JaffaCakes118
-
Size
217KB
-
MD5
dcc36b5c6293c43621244384322dc8b3
-
SHA1
5c8e8a04582e04bd8f73dcf3a3dcbdfeb07a690e
-
SHA256
462705f3b9fda76287734c666520ad8e275e7fd5d17db02cfc650387d5ab97bc
-
SHA512
41a6660fe25a6a1dc5178700483bd21bd3ec3e9de460118e2aa4ec08f061518f7e9f44e49d725be087e509c5f1030d1ee06e19a988e93df06eef6dfb9276d750
-
SSDEEP
6144:jFV8ZFLysbD3i+JJJJ+PlY0VLrtzZZBZjvEnv17oSU:jFV8ZFGsbh0VvtzZ/Zjsn5oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcc36b5c6293c43621244384322dc8b3_JaffaCakes118
Files
-
dcc36b5c6293c43621244384322dc8b3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE