Behavioral task
behavioral1
Sample
de21b993faf15e3980697c1cceaea362_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de21b993faf15e3980697c1cceaea362_JaffaCakes118
-
Size
122KB
-
MD5
de21b993faf15e3980697c1cceaea362
-
SHA1
a0c57675fc988b1c7624a7690e1ac032a2a25319
-
SHA256
80bfa2d86cf08736d29e73d5a3354305b8e659ecda8b2a83523e3a74a4a3d0ec
-
SHA512
bf48d2396d72791aaea94129f70790bc120a5fda11bf1e2a15c297e1715475b219bbbe9aedcffea16452a1e56b206730d4e40b47f661eb1903baf7c8ec36bb0c
-
SSDEEP
1536:HEp3hBjxvHBtdZ8M/kAVkrAVkQKkFkvqn0oInuSNZzw1bJDcf9eHu+kkbcJGuSCJ:cfxVNLTgPpnumCdoEbnuN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de21b993faf15e3980697c1cceaea362_JaffaCakes118
Files
-
de21b993faf15e3980697c1cceaea362_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE