Behavioral task
behavioral1
Sample
f612cd42021412f5c76592cffb8c68a9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f612cd42021412f5c76592cffb8c68a9_JaffaCakes118
-
Size
2.2MB
-
MD5
f612cd42021412f5c76592cffb8c68a9
-
SHA1
9a447a900625304e141b9d161b9084c32134746c
-
SHA256
a18082f1fab056ccd0ca82bb62858efa18f07eb223f2d6d936f5fca249f32164
-
SHA512
07ebf92f463dc606780ae7b23c0ba034a0cc902711b8f83107275da686b1ceb527e39e39a3997f5280d20f062061f8c0dddfdd300071e03f88939d903a8c9d49
-
SSDEEP
49152:cCnJ6xxXOScfGDvk6LadzlI6y/2jHUIZM93OYhuRX:1n8zXOSWGDvNWdzG/2j0l93ByX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f612cd42021412f5c76592cffb8c68a9_JaffaCakes118
Files
-
f612cd42021412f5c76592cffb8c68a9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE