Behavioral task
behavioral1
Sample
009222f383362d18ae30d06c4c8a3a70_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
009222f383362d18ae30d06c4c8a3a70_JaffaCakes118
-
Size
367KB
-
MD5
009222f383362d18ae30d06c4c8a3a70
-
SHA1
42df9f53ea0e487a1dfa5c2aa6f3666de81fff29
-
SHA256
26dfb53022e863ba77469a29ebbe4279de5b222811fcf9746212fb9f7bae7d50
-
SHA512
1f7b7141067cb824a5536dcb93ad6473a35808be60ca38932f1520e16c8efcc7a1bc6cc9fc9eeb4a4ba1fc162b8bd774f679571e1b7aad3077bb9a23bb2867cf
-
SSDEEP
6144:MOS2YCRZcucLQFugu71drX2hIQSDGrOFLj/u4Ds/XiU8MLmHMoSzJAXjiU4bz:MOS2Yg/w7frGZSn644KBM+MoSzJAX+U4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 009222f383362d18ae30d06c4c8a3a70_JaffaCakes118
Files
-
009222f383362d18ae30d06c4c8a3a70_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE