Behavioral task
behavioral1
Sample
38583be668fb486087206c786b4b0483_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
38583be668fb486087206c786b4b0483_JaffaCakes118
-
Size
6.9MB
-
MD5
38583be668fb486087206c786b4b0483
-
SHA1
0e193636c618308923deb6d9dc2a82f599027b77
-
SHA256
a4979d8a390045a58735e57e817ae1b0c02afcdb21c36270dabf7f0ded287cd4
-
SHA512
c9af19dd823d470c022cfd237b65b58a67b381d1f5affb28a4512483839412581cea630ff30010554c963b816af45e2bf69d98be82c4a1db7bb108d6ae39b481
-
SSDEEP
196608:30BccpJkwF3+HHZ3571PQsJ+9ai9lEJrbFB1LZfVKsxN0:EBhkwx+nd571ps9aZ331fKCN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38583be668fb486087206c786b4b0483_JaffaCakes118
Files
-
38583be668fb486087206c786b4b0483_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE