Behavioral task
behavioral1
Sample
ddd4fd46073f0cab68a54201fc5527e6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ddd4fd46073f0cab68a54201fc5527e6_JaffaCakes118
-
Size
388KB
-
MD5
ddd4fd46073f0cab68a54201fc5527e6
-
SHA1
0cffb0eecc15bd181d545fa4d13a4098110fa245
-
SHA256
b6bca07284e1788e161075bf758db9d0bfa86939a6e8b111f5347b7b7fb049dd
-
SHA512
94b0321e55631e86a6cf06c25214a9487947afc35c3a1c66e8fb61d39c95ef8e8778c2da23ea3607c51629d9371472779491c927f9aface44833f4572e7d925e
-
SSDEEP
6144:G805yHbwOUo6RwLfurlHiIsmyh5yCuCak3vSGo4cFpdc/eekNpoSHzeeC:z05OyrfRHiXhquv7Ypdc/eeqpoSTeeC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddd4fd46073f0cab68a54201fc5527e6_JaffaCakes118
Files
-
ddd4fd46073f0cab68a54201fc5527e6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE