Behavioral task
behavioral1
Sample
376c0dbe1a696063c46363c46e4f70d8_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
376c0dbe1a696063c46363c46e4f70d8_JaffaCakes118
-
Size
190KB
-
MD5
376c0dbe1a696063c46363c46e4f70d8
-
SHA1
e0b30d6f81a05b4c05dc5b0fe8431b4d3ed785b8
-
SHA256
75025fefb78028bc6972d0b23595e0d874e610d776fa921d63e03dcca0b9d996
-
SHA512
fa4090777f30f5cf06369a9d24b9aad31af6a3c8468c72544adf4a924fd6d172cca79f9b957104a28199b74868489dc5a407d4e868fce1903066ba8c43377005
-
SSDEEP
3072:SayQNcz+HCYYYYmd4i94nFGFQPVYbotXRV+j5J+pcTuG:xyxa5d4i94nFGCPUGGK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 376c0dbe1a696063c46363c46e4f70d8_JaffaCakes118
Files
-
376c0dbe1a696063c46363c46e4f70d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE