Behavioral task
behavioral1
Sample
04772461eacdf948ac5243455f961db5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
04772461eacdf948ac5243455f961db5_JaffaCakes118
-
Size
309KB
-
MD5
04772461eacdf948ac5243455f961db5
-
SHA1
0d83281a6c9a9cf90da2759aaa859037b23bbb92
-
SHA256
76604303894668b11b26dc6c33d8b68b537620d6858c58642253664006effbfb
-
SHA512
6b8fec1a977cd1f8561a9776c57153d9a6c1afeefaf8f02cfba5f5ab61637ab68ddc93d8906a5d3ef37e5ac61312d42c64104d2a78db23752ad8c7204bbf124c
-
SSDEEP
6144:CRAgmiZ0BG3T8lpR7bM0HBKkZsnKrogOPxepXx433zflSrTkrvp7Wr:CGgt068RPhxGnKro1xep8NSraa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04772461eacdf948ac5243455f961db5_JaffaCakes118
Files
-
04772461eacdf948ac5243455f961db5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lif Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE