Behavioral task
behavioral1
Sample
dffa918ccfebdca6b423a99d877f45fe_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dffa918ccfebdca6b423a99d877f45fe_JaffaCakes118
-
Size
469KB
-
MD5
dffa918ccfebdca6b423a99d877f45fe
-
SHA1
391cfb165761a5f8f92533c63fdee051785a0360
-
SHA256
33a1ff8f5ec6e10418010cbbdd71191a89505788b316da8dd8a4501d7c9c2024
-
SHA512
ddac5c14e8368d5f8c623ab124c36c9251d852efd5dac754d2afff47e9b77e37bc44648386786e0c95bbfedb25b5c0cb9fb109921f58d558c626d88876a48d86
-
SSDEEP
12288:Vka0fyP12dWk247ZWkypkL0n0ITE+I3o3vY:V50fyP43241Wky6L0n0Hlo3A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dffa918ccfebdca6b423a99d877f45fe_JaffaCakes118
Files
-
dffa918ccfebdca6b423a99d877f45fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE