Behavioral task
behavioral1
Sample
f69796ddbfe95efd4ed3a38bcac094a8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f69796ddbfe95efd4ed3a38bcac094a8_JaffaCakes118
-
Size
799KB
-
MD5
f69796ddbfe95efd4ed3a38bcac094a8
-
SHA1
a2fb0c75963e979fd74f4491267adc35eee4953a
-
SHA256
86c6526b2a7879131da81309a9a4112b8689d466cfb4162b4c6e506b06fd9c7f
-
SHA512
773baec0e46716dae662e11158318aff90a627f43ffdecfd11a470d9298e12be90be9d3b79ec4f6dca3b3d45eb45514d9e1155e21c969868e121187d5a3728ee
-
SSDEEP
12288:6JJ8Zx/UlzOqokK0mliwZZUtgAQVTwptgqmPOKF3coK0:qACokK0mliwZi6V0jjbjoK0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f69796ddbfe95efd4ed3a38bcac094a8_JaffaCakes118
Files
-
f69796ddbfe95efd4ed3a38bcac094a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 416KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE