Behavioral task
behavioral1
Sample
ff56603611c13bcebcf247e63338d1fa_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ff56603611c13bcebcf247e63338d1fa_JaffaCakes118
-
Size
2.8MB
-
MD5
ff56603611c13bcebcf247e63338d1fa
-
SHA1
d121a4848303c8a77280a487f51a3a80243a92f9
-
SHA256
01e4924507aa7a4fdbd8b57e29ba8c68004e4daf5f05d747722cf19db76ccbbe
-
SHA512
548b132bf285c0d1b935f709c562de906b80a6a69e0b07ab60a96203100bf76b2bcc8b6fa369bfc69949543c3ecbabb0ae71ca27edd10f712fd9499a3e5d16dc
-
SSDEEP
49152:NKH85MtsPTEDJ+kOJpY86P5KeWTcRAdtO7xI5VLQ+wWVGjCj6H433RT5s:EH8KtmE1QYVAeGcKWxI5VqWVGjCj6Y34
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff56603611c13bcebcf247e63338d1fa_JaffaCakes118
Files
-
ff56603611c13bcebcf247e63338d1fa_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 994KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ