Behavioral task
behavioral1
Sample
ff2f582fb685282d0b7fc81b3f5a3db6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff2f582fb685282d0b7fc81b3f5a3db6_JaffaCakes118
-
Size
2.5MB
-
MD5
ff2f582fb685282d0b7fc81b3f5a3db6
-
SHA1
d2324dc34ca6ec4fa8582d5676a699acd1b0740c
-
SHA256
cacb22c3854bd12348124ac0f7c69d3b35da1e122eac1d42fe144bff65559e22
-
SHA512
31cfc44ce44a583aaba9d93cc01e289745cecf89434f54a07bef854135933e097c0f8a84fb742dbad7a9c2778ce7d97e3bebe75f47c2aa5c1340dfba8de065e1
-
SSDEEP
49152:CWLZuwYKSeKGz3VqJqUhOoTuis33bzHO19uH:Ckbz3+qUhOoTuv3LzvH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2f582fb685282d0b7fc81b3f5a3db6_JaffaCakes118
Files
-
ff2f582fb685282d0b7fc81b3f5a3db6_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 971KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ