Behavioral task
behavioral1
Sample
df5055e47747cdefd2d0f63651172aa0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df5055e47747cdefd2d0f63651172aa0_JaffaCakes118
-
Size
379KB
-
MD5
df5055e47747cdefd2d0f63651172aa0
-
SHA1
e0c83a50cdb56cedd24306dd9b077ed6fbd3302e
-
SHA256
5913d865db67dc2fe7eb012cd6d42af5980582f144940271dc520fc37127d3c0
-
SHA512
3ff7096a8e10e77b90270e6e238815950aca97ec83f6f7fa97555af0b9ecbd8b6afe80c137afe136fbd0dd06223867b0d0d13e902c469887eff076754e64400c
-
SSDEEP
6144:l+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LE7:hs03z8tgkGJRxpw4osO2JoS0LE7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df5055e47747cdefd2d0f63651172aa0_JaffaCakes118
Files
-
df5055e47747cdefd2d0f63651172aa0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE