Behavioral task
behavioral1
Sample
f1105c725592b5a0d849ce8cc861f155_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f1105c725592b5a0d849ce8cc861f155_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1105c725592b5a0d849ce8cc861f155_JaffaCakes118
-
Size
154KB
-
MD5
f1105c725592b5a0d849ce8cc861f155
-
SHA1
c0f1b6e6d526123c3bbcb4db8bafaf04966ec308
-
SHA256
e1dc5866305edcfb9ca873018e0ab77f7b20ecbc2c0b2e02eb5f6d7b8ba9190e
-
SHA512
7af560379e88c76f18cda18ec501f5a47218b6a436f444db369d74535d6f6d1bb655f5820d0224c6da332c9381c9c2a9e4fb0a7572f935552a911b95f9b0d085
-
SSDEEP
3072:89NAayJwAYVNvWsqqdCC0IBrx8bzzrCltEVxSOUw56g:0yTYVd5dCC0E8zTSNw1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1105c725592b5a0d849ce8cc861f155_JaffaCakes118
Files
-
f1105c725592b5a0d849ce8cc861f155_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE