Behavioral task
behavioral1
Sample
0398dbaf815a3677c20927265f05ca55_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
0398dbaf815a3677c20927265f05ca55_JaffaCakes118
-
Size
435KB
-
MD5
0398dbaf815a3677c20927265f05ca55
-
SHA1
2055004868c01ec7feb253b56c196624452bcc87
-
SHA256
6b0a80bac391431955338b3bde3096f9edea26c9e4d9f8af8952b9390f196cab
-
SHA512
542a14bc54f3dad5d1c5ed724fcec70668feb7166ceb421cfd4a88817b160ab9ae31f71b86b2d7184b94d76798545cfb88a92381b1d3aadf94b3f1acbf5944c5
-
SSDEEP
6144:G5zCDsPq5rnNr0/jCwkKdK7CrjtLGuDAsSJITlWXA2oBFoSgZ44MM2UExGB6iLsl:MalbNgewpuCI7JikXA2oDoSO/8G0EmDH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0398dbaf815a3677c20927265f05ca55_JaffaCakes118
Files
-
0398dbaf815a3677c20927265f05ca55_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE