Behavioral task
behavioral1
Sample
2ec5ab30258804668ce717c4b6f712f0_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2ec5ab30258804668ce717c4b6f712f0_JaffaCakes118
-
Size
478KB
-
MD5
2ec5ab30258804668ce717c4b6f712f0
-
SHA1
8dd311a5d8eacd32a5347b3762982a4e105d103c
-
SHA256
65c770d4f82b6c7230126ea7d6c0fbae5b8e625031a59af36138a78e4a920182
-
SHA512
ac87379e4c58f39c23dfedde1d39580d00d42d85e3aa28d37edfb56f319c57d736048e6e326a848fc0b673b271ec406968361b806e8a1bdc14ce166937ac824b
-
SSDEEP
6144:HUmGdVgYFHx3f14FoskrHj79E1kZRQis3jWuT9Fn5ACYvW29m/nPL/:zkVgMxP6Fo/bakZ+isTW4n5jYvW24/n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec5ab30258804668ce717c4b6f712f0_JaffaCakes118
Files
-
2ec5ab30258804668ce717c4b6f712f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE