Behavioral task
behavioral1
Sample
28eb6d87f5dd53b45c2f636724edccb0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
28eb6d87f5dd53b45c2f636724edccb0_JaffaCakes118
-
Size
3.0MB
-
MD5
28eb6d87f5dd53b45c2f636724edccb0
-
SHA1
68b192cca86bc94d8be45784c28d4dad8c3facc1
-
SHA256
6cbfef057b125eab9c7a1e41125604050f73bfc3acbbaf5b050fbdfc8a6aefa2
-
SHA512
7562a79d69507de817d4e9f302a1e67b1d3e7e315785adda92da5f61844a73711f76349d6ed6db17412616facad562d9e1f4549f9dfaeca1105a7ac8c6672ed3
-
SSDEEP
98304:BT33//+2pBEBWtrcvffSzVACoL37ba6yj9/+j:Bb+eEBWivfQwL37e6y5K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28eb6d87f5dd53b45c2f636724edccb0_JaffaCakes118
Files
-
28eb6d87f5dd53b45c2f636724edccb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.u Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE