Behavioral task
behavioral1
Sample
04d76a33a35f93b2d046d622e8fb5c2c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
04d76a33a35f93b2d046d622e8fb5c2c_JaffaCakes118
-
Size
110KB
-
MD5
04d76a33a35f93b2d046d622e8fb5c2c
-
SHA1
de4807ed1a065bbe151218af4d80ce9e584beb0d
-
SHA256
c98ad11e524117c5e8f0069965d7b117b9c2651707f793cf062171ec39b70e45
-
SHA512
dcf2e578705c225e14ae2f0c7b7176c419ceb031922d0bc6a8fcf248222983942b961e2951b0645ed38d2cd02b92d89793db84eb42ecf1d2a8244cf3438d1bb7
-
SSDEEP
3072:AR8CM1qWu0/XcGFTNoqq8XEtjZ7T5oYjOdMV:ARLWqK/MmTqztFjYq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04d76a33a35f93b2d046d622e8fb5c2c_JaffaCakes118
Files
-
04d76a33a35f93b2d046d622e8fb5c2c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lubov Size: 181B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lubov Size: 65B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ