Behavioral task
behavioral1
Sample
11855b055020c86df2bbaa9e06ccc469_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
11855b055020c86df2bbaa9e06ccc469_JaffaCakes118
-
Size
370KB
-
MD5
11855b055020c86df2bbaa9e06ccc469
-
SHA1
56bb6f1c00e481018fc80b3fc04a265107962901
-
SHA256
83d8ca16d6b3553e2771b06666e845d402778d879d5792c22f29bddd18d4753b
-
SHA512
3f1c21de13ac8bbcf8b86045a25e36648aac216ff386ea2e0837ff732d90b9f1682b53846e230923b70fe6ca2646eac0eb6611c991ce73432ab88ffb2de4e9a4
-
SSDEEP
6144:/7DWPcU53f72xFXu2gUSiUJANq8DWm/j50HGo/ddaMpZfOJa6PUmFQtvSzHxV7Jj:/7DWkj8iUmM8CmiHtddaMbfde+0PJh8W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11855b055020c86df2bbaa9e06ccc469_JaffaCakes118
Files
-
11855b055020c86df2bbaa9e06ccc469_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE