Behavioral task
behavioral1
Sample
f69802cc3e1d52001c7d876ac6803c8d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f69802cc3e1d52001c7d876ac6803c8d_JaffaCakes118
-
Size
1.2MB
-
MD5
f69802cc3e1d52001c7d876ac6803c8d
-
SHA1
80ff84fdbfa1ff648e6c8ebfe70661cd9cc2306a
-
SHA256
d2e4b47d20ef52fe6400343e7347d6162f1c09b23cca8000d425ca76e1a3e85a
-
SHA512
50a4a83ed8d1299bc2ee265083734af946bee7308c30a3a75b1249c18b3eca1e5f43ed513ba42ae1c8c2c7168b2038cdf8cad270e590af4c07a8b0c860738269
-
SSDEEP
24576:dpJvENvv7JLztE5O/cn/qgfMwoTmjRKvPxCubsuRf476EQlbjN4llCn26N1:qF7JXtQ/FMbmj4ghIfujO4lsnp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f69802cc3e1d52001c7d876ac6803c8d_JaffaCakes118
Files
-
f69802cc3e1d52001c7d876ac6803c8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE