Behavioral task
behavioral1
Sample
fac51ed44b9c5899bce3021044a42dd2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fac51ed44b9c5899bce3021044a42dd2_JaffaCakes118
-
Size
3.0MB
-
MD5
fac51ed44b9c5899bce3021044a42dd2
-
SHA1
19f0b05ad614e6169d443d582d41a7ecf753f8a6
-
SHA256
593e7498714712e25d0b6233738a2cc806c44df25ccd7f05b86cda519e051775
-
SHA512
44d9c1588898e871503e9a19bc49bd1b0966285c4f40ce6dcb1e7641cb02824412ca6042b68314c9ae5dce62dada80b7b47b0bd15234376449ac695f2b994487
-
SSDEEP
49152:4l/THyBjtegiHZt82X/26YUClfgHh6C4Us+zaQRAf9YpJYMvxgxXsYcV:49byB5Ti5t8o+6LCw6Cd3mQCFuJYrxXy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac51ed44b9c5899bce3021044a42dd2_JaffaCakes118
Files
-
fac51ed44b9c5899bce3021044a42dd2_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1014KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ