Behavioral task
behavioral1
Sample
dfdc425c2ad6bb8e92af039c38dbc193_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dfdc425c2ad6bb8e92af039c38dbc193_JaffaCakes118
-
Size
3.0MB
-
MD5
dfdc425c2ad6bb8e92af039c38dbc193
-
SHA1
102070e8758992c9c4220eb1f8a88fb728683396
-
SHA256
1baa109e91b212e2f137c8dd042659f79ed052f34844f72d80166a4ef64c422d
-
SHA512
e4f42eabc1d0a6a0ff48b4915b038e8f20fc98253ce1e7259d3b3324985c6ca8cfdf9105adeead8e69bc8e4bfab87ae2f6daa14eb113c26b045884325305479e
-
SSDEEP
49152:dSyTo/XD7blzM2+0me31nNIXaQloiG/sFS0i9qFfXHpL7vXC6hpwjr895Y:0yT635Y2+0F1NIqlRE6qpXHpL7vXdhpc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfdc425c2ad6bb8e92af039c38dbc193_JaffaCakes118
Files
-
dfdc425c2ad6bb8e92af039c38dbc193_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1006KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ