Behavioral task
behavioral1
Sample
e044ce7c5d85b000d6718738823dc949_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
e044ce7c5d85b000d6718738823dc949_JaffaCakes118
-
Size
898KB
-
MD5
e044ce7c5d85b000d6718738823dc949
-
SHA1
8d53dc31733807a3d84533b682079ae9b94c7bd8
-
SHA256
c81ba4d87034f4aa5295526b7c6bdf3e9d4a066fa6dc7f593c9d8704d43d7431
-
SHA512
185a36ac601e395adfd84cfb29f94637b11bcf0f42d13e536739e715444cf21cd9284185c0f1fc266447d9472545afabc37e54f57a2cc60396d734680cf8f3ce
-
SSDEEP
24576:oScgU5o/eqFizvyBNxmkg5yOGHqfmKDpo9BsMUS:oXs/eqFizaBNxgQUVDq9Bs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e044ce7c5d85b000d6718738823dc949_JaffaCakes118
Files
-
e044ce7c5d85b000d6718738823dc949_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 668KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE