Behavioral task
behavioral1
Sample
f43b261c4479443e1130a024c28b5b73_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f43b261c4479443e1130a024c28b5b73_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f43b261c4479443e1130a024c28b5b73_JaffaCakes118
-
Size
466KB
-
MD5
f43b261c4479443e1130a024c28b5b73
-
SHA1
b18bdb93f794ca0bd77840a3040c73abd370655f
-
SHA256
4d60539fb2545df1a88cd48d4cb6f89201ef90b0213c7e1650c005ec64d491e2
-
SHA512
464a5e0a3f0e6249daba404467402083e5eda86f8762e99b3015dfc0b393c2a851530a95e705a5c905d96159ffd3ec3e52b7f18682124b05f58a4548173636a7
-
SSDEEP
6144:5z1n+YgkEq5NVQKzHMiLDH9riSRLigC9C0Z0+eLJoZTEQ1+12UbTf:5B9VEq5NvjFLgtgC9C0yRLJaAT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f43b261c4479443e1130a024c28b5b73_JaffaCakes118
Files
-
f43b261c4479443e1130a024c28b5b73_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE