Behavioral task
behavioral1
Sample
46905b9666bda11b98029640035168cc_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
46905b9666bda11b98029640035168cc_JaffaCakes118
-
Size
481KB
-
MD5
46905b9666bda11b98029640035168cc
-
SHA1
3c61e999ac746093895674f1be447ee10b2688ac
-
SHA256
b76c5e97e2964a1d71827bbbe72b2830b313419f69d6e8d807c917f721490e11
-
SHA512
66a185e307fde590a5b84eb87b2314b5b955d9d6a3a0ece3ec74d7e0da9fba953c2d6950886fb4c3642efcf7ed24c248c7935dd940a3ffc2b1361c965f024487
-
SSDEEP
12288:7iIk1vVAXG0S0YzBdAGvK3NwefjwrPPoS:GIY0Yt5P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46905b9666bda11b98029640035168cc_JaffaCakes118
Files
-
46905b9666bda11b98029640035168cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE