Behavioral task
behavioral1
Sample
033f7f070b08587fd82e1e51fcf4ba2e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
033f7f070b08587fd82e1e51fcf4ba2e_JaffaCakes118
-
Size
219KB
-
MD5
033f7f070b08587fd82e1e51fcf4ba2e
-
SHA1
14026d85fbf46fef990330c13eb89f489680db70
-
SHA256
2fd294d218835abe39290bc6e6a31eadc8885591455a5ed1be2ae0dcf54f74d3
-
SHA512
4b3704afa423398d236adaf4a86b26346fa85c2f2b1f91f162aead50af52823b60acba5dd3f419e29da470f6f0ad75d76c39a74ccc4bdc472b6484f750f30e1b
-
SSDEEP
6144:dTYRDYnKzn3PTCtW2Q7KjCcJgS5Za2j/eW:UDAKzfTKvQTwZa2DB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 033f7f070b08587fd82e1e51fcf4ba2e_JaffaCakes118
Files
-
033f7f070b08587fd82e1e51fcf4ba2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE