Behavioral task
behavioral1
Sample
103f9da64b0fb56e19f5d33efa1e648a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
103f9da64b0fb56e19f5d33efa1e648a_JaffaCakes118
-
Size
486KB
-
MD5
103f9da64b0fb56e19f5d33efa1e648a
-
SHA1
9327eecba3c2cb74b1400cd4204c248195479cba
-
SHA256
9b66c504daf626fe99916a718f2360989c325c18db7be2780e1efa7adca6edda
-
SHA512
d9e322af843993ae92a0a8295edd6020dc6734f90662b350bf99205f32dccd240f79506ebaff5672e39dd46fa69be367a18a8875f9be4292f4511f006b719c51
-
SSDEEP
6144:xJOHjx7XlBRh2YwuJZf6wHfHRl7cLz/tDhlZK1Zy71B7qD7J2xpzy5IcupJw6Yc9:xoHjxL2q6w/Xk/O5IdFCCFB1oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 103f9da64b0fb56e19f5d33efa1e648a_JaffaCakes118
Files
-
103f9da64b0fb56e19f5d33efa1e648a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 477KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE