Behavioral task
behavioral1
Sample
d99cc85ccaf58aa693925e0d6247f07e_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
d99cc85ccaf58aa693925e0d6247f07e_JaffaCakes118
-
Size
485KB
-
MD5
d99cc85ccaf58aa693925e0d6247f07e
-
SHA1
7568a11d06c975fdd049173f4e2f05e64f0441d4
-
SHA256
93d9703ccd1d2923918af2e218635749894732c38e30e62a12d0decc3e230250
-
SHA512
b009f84f893b927835a949b5453c2b55f2f55a8b95c8321dc4cda2497247fb8098d57026f93998b0e15302de5cd901518b8cb3aaab434eb0896b5a387c5503f3
-
SSDEEP
12288:Bqbh0B/9JcvWCnEOokl3NmPoSuP2NVkFAYwIfUKS+vKKQ242Sdsmu:SYPcv5AkZN3PvCYwsUKNKHIosmu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d99cc85ccaf58aa693925e0d6247f07e_JaffaCakes118
Files
-
d99cc85ccaf58aa693925e0d6247f07e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE