Behavioral task
behavioral1
Sample
fd251e4a59b81eb60672b265a803639b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd251e4a59b81eb60672b265a803639b_JaffaCakes118
-
Size
283KB
-
MD5
fd251e4a59b81eb60672b265a803639b
-
SHA1
87da3e78cb9b3394603dcf519c29a912aa276dec
-
SHA256
4ca05bacdc58a6acfd2383d14b00fecb81db45742b3ac2cf767d48eb85777b8f
-
SHA512
d6902f4bed5e30b19963ac2f1fa953820eed143efe8992e64d6a08884d4a85579023f33bda453aee5eb1d1d908f00995127302af8421ee10c9e987e106e968dd
-
SSDEEP
6144:MDzDnLrU3qjD+B5Dot9t5QAeOQxX81EC1X:Mjnc3ADQm/eOmXEE0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd251e4a59b81eb60672b265a803639b_JaffaCakes118
Files
-
fd251e4a59b81eb60672b265a803639b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE