Behavioral task
behavioral1
Sample
f68aaddc9df20c8ab958d6c0328ff9bc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f68aaddc9df20c8ab958d6c0328ff9bc_JaffaCakes118
-
Size
485KB
-
MD5
f68aaddc9df20c8ab958d6c0328ff9bc
-
SHA1
d9b0be3b84f70d05d7994cd0d44b260274968ffb
-
SHA256
0a2b273e0569f06d4be84e851696cccfd3a99f8add84be3ab7dbcc23ba596171
-
SHA512
15f101642477a6368b711135665b8a48be44aaa1ea336b16bd183cb7c65d17ea5b12cbfe67576ba6c4ae5b2225fdca14c5c90d98413c65e9b099655fadd84eba
-
SSDEEP
6144:eCKSIKU1sS6cGCN5tSAY/NsyEb9BO2LttmAT1zQWxgxR+zx7F69d63E4H9/:5SnhShGb9BO2L2MzfgxRiF6763B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f68aaddc9df20c8ab958d6c0328ff9bc_JaffaCakes118
Files
-
f68aaddc9df20c8ab958d6c0328ff9bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 431KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE