Behavioral task
behavioral1
Sample
42039c23a9deb4318a8a2fc24e5b800c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
42039c23a9deb4318a8a2fc24e5b800c_JaffaCakes118
-
Size
38KB
-
MD5
42039c23a9deb4318a8a2fc24e5b800c
-
SHA1
4d5fbbf6375c2ecb975490fd1d705b5fbacd1770
-
SHA256
d71fec2a390c34f58508646ad5461c2fcf1dc85fa00d00ee2b5c3d132ab49cf4
-
SHA512
19a7a37e6a9b62493ef8fda2deb5e78e547f39cb49418b90fb483bd64f4ab47097469fc4d15993828e790a157975b2173408b01df134d3ac26b3507fd5616f7a
-
SSDEEP
768:58t1/YR13HAzasx8QajF0iSULrqK3px5TP9yoRZOQMLmRmKFu:+a3ri8Q0hvBThu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42039c23a9deb4318a8a2fc24e5b800c_JaffaCakes118
Files
-
42039c23a9deb4318a8a2fc24e5b800c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE