Behavioral task
behavioral1
Sample
07fdb7bbc6c4d558a383f339d344eb3e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
07fdb7bbc6c4d558a383f339d344eb3e_JaffaCakes118
-
Size
38KB
-
MD5
07fdb7bbc6c4d558a383f339d344eb3e
-
SHA1
a6c9643a130da61044221a57b2f16308b5b011bf
-
SHA256
1258cc03b5bf548cdd8daff4c4d4e7b9b1176d2e7d8298ff77459e362bd62f83
-
SHA512
e7cdcd217702a06e2e04949718b9bb4b80e995a3c61517223937282dc9061aeb44a55c5d37b5b9e8a9b8ff7983b91fb39bad829adc6048a034a0abba71c2e10d
-
SSDEEP
768:QWeaMO9gIWYuXAzdBk+3JOFqvwXITfHiiSP5nUMh:PvMbTmG+ZC+TiiSx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07fdb7bbc6c4d558a383f339d344eb3e_JaffaCakes118
Files
-
07fdb7bbc6c4d558a383f339d344eb3e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE