Behavioral task
behavioral1
Sample
425103c5ca291fa8a759b3c36b3b8e65_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
425103c5ca291fa8a759b3c36b3b8e65_JaffaCakes118
-
Size
216KB
-
MD5
425103c5ca291fa8a759b3c36b3b8e65
-
SHA1
c852bfe40467aa49c05e641eb863c6d5b9bc17a4
-
SHA256
c4f218774f7f20ef7d364f3ba99ecab6868e729f6e77d69ecb70beccc8aea0bc
-
SHA512
8319edd4f390ba5529217d2689fe6107370de12c4bfb8c04f6eb0161f80531437c50b88127d00c4d1c61b6d5df6ea5deb61eebbd7cadeb91036f39e177122004
-
SSDEEP
6144:7NCzLYXnXmUhko3w4ge971kk3YEJ9aghoSReV:7NCzLctvw4geda87JYghoSReV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 425103c5ca291fa8a759b3c36b3b8e65_JaffaCakes118
Files
-
425103c5ca291fa8a759b3c36b3b8e65_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE