Behavioral task
behavioral1
Sample
JaffaCakes118_f7e7c262b546b461a81763bc3831d0d9.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_f7e7c262b546b461a81763bc3831d0d9
-
Size
805KB
-
MD5
f7e7c262b546b461a81763bc3831d0d9
-
SHA1
73456616c3f3c659ef7111666ffcb522390f4804
-
SHA256
87bb4d108c420873c15e7d87d22182b2764f7a9be78cf40d2ab9af8e59645f62
-
SHA512
9142974838ece6c105923387133c31ea75ddebe7efe8a01e281e67626ea2e43523f744020887412cf030798c98a563e41d86c54d5aab965aed43daeaf4ce4777
-
SSDEEP
12288:z8FNK/GdSDaqFmadIg4KaoSLBBjjP0MccUXUs2HFs7sIgn585n7i:YFvca8wg4XHPzccAN2HFsoIgiG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_f7e7c262b546b461a81763bc3831d0d9
Files
-
JaffaCakes118_f7e7c262b546b461a81763bc3831d0d9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 872KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 412KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE