Behavioral task
behavioral1
Sample
ffdb893f20812d29ca926dfa854a2f81_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ffdb893f20812d29ca926dfa854a2f81_JaffaCakes118
-
Size
93KB
-
MD5
ffdb893f20812d29ca926dfa854a2f81
-
SHA1
73800c0ee4fd9e2f2c139b6f0871b34ff3885cbe
-
SHA256
449e2b7d4e13ed25a2c1169be0cbb7deb4cbb14ab26724ebd8647993500fb5fc
-
SHA512
6eaeb6bfeda3e92ec090e23b2797443ed47a632353d421e4f4b5f71a44ebb14fc0c878ed64ffcbc4a569774e2b8236af925b7ecf919c727f6247a41fafd99cb2
-
SSDEEP
1536:wZe5auWjAp8yQzG9nSTXnnXRFVtnAaWPWewnouy8ICltx:+8auu3ysdnFLoutI2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffdb893f20812d29ca926dfa854a2f81_JaffaCakes118
Files
-
ffdb893f20812d29ca926dfa854a2f81_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE